full-disclosure - Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20121114122017.GC2630@sivokote.iziade.m$>
Date: Wed, 14 Nov 2012 14:20:17 +0200
From: Georgi Guninski <guninski@...inski.com>
To: "Chris C. Russo" <chris@...ciumsec.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: **VL-JUNK** Re: Skype account + IM history
 hijack vulnerability

I will drink to that :)

Was this "feature" in skype before microsoft bought/ruined them?



On Wed, Nov 14, 2012 at 08:15:51AM -0300, Chris C. Russo wrote:
> I'm just not replying, because I have no comments, I can't believe how a
> huge service like skype doesn't have proper security measures in their
> website and client.
> 
> Chris C. Russo
> 
> Desarrollamos soluciones para hacer el mundo un lugar más seguro,
> conocemos el valor de su información.
> 
> w: www.calciumsec.com
> m: chris@...ciumsec.com
> m: +54-911 6610-1900
> 
> On 14/11/2012 08:00 a.m., Benji wrote:
> > This has nothing to do with the client. The service is at fault.
> > 
> > Also for the record, r/netsec is a huge circlejerk.
> > 
> > 
> > On Wed, Nov 14, 2012 at 10:20 AM, Kirils Solovjovs <
> > kirils.solovjovs@...ils.com> wrote:
> > 
> >>
> >> The team has worked around this and are now trying to fix the
> >> bug/feature. :)
> >>
> >>
> >> http://www.reddit.com/r/netsec/comments/13664q/skype_vulnerability_allowing_hijacking_of_any/
> >>
> >>
> >> P.S. Not to say that there aren't any other security bugs to come. Use a
> >> secure  client!
> >>
> >> --
> >> Kirils Solovjovs
> >>
> >> _______________________________________________
> >> Full-Disclosure - We believe in it.
> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> Hosted and sponsored by Secunia - http://secunia.com/
> >>
> > 
> > 
> > 
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> > 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/