full-disclosure - Re: [FD] Security flaw in Full Disclosure mailing list

Open Source and information security mailing list archives

Message-ID: <CAOJKFBBM5OwXHh7uuVwC9meeFkHOHigUjFC-x38Dym9Yh3K6mA@mail.gmail.com>
Date: Wed, 2 Apr 2014 17:31:41 -0500
From: Brandon Perry <bperry.volatile@...il.com>
To: Michal Zalewski <lcamtuf@...edump.cx>
Cc: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: Re: [FD] Security flaw in Full Disclosure mailing list

Actually, most email clients now can filter out your plain texts passwords.

For instance, my password is hunter2, but you will only ever see *********.
Email has worked this way for ages now.

On Wed, Apr 2, 2014 at 4:38 PM, Michal Zalewski <lcamtuf@...edump.cx> wrote:

> > -                table.append(fmt % (listaddr, password, optionsurl))
> > +                table.append(fmt % (listaddr, "********", optionsurl))
>
> That doesn't work if my password is "********".
>
> /mz
>
> _______________________________________________
> Sent through the Full Disclosure mailing list
> http://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/
>

-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives