OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Download Accelerator Plus can be tricked to download malicious file

From: Dave Korn (davek_throwawayhotmail.com)
Date: Fri Jan 06 2006 - 12:52:14 CST


visitbipinhotmail.com wrote in
news:20060105180806.22333.qmailsecurityfocus.com
> Just n' update:
> DAP searches for all its mirrors from mirrorsearch.speedbit.com
>
> I have no knowledge about HOW the mirrors are gathered.

  Then your report should have been titled "Maybe DAP can be tricked to
download malicious file, maybe not, I haven't got any idea because I haven't
bothered to find out".

  Or even better, you shouldn't have bothered posting it because it has zero
content. "There might or might not be a vulnerability in application X" is
NOT information. Uninformed speculation is NOT information.

  What you actually observed was DAP not being tricked and not downloading a
malicious file. What you wrote was the exact opposite. Your report is
fraudulent and utterly dishonest.

    cheers,
      DaveK
--
Can't think of a witty .sigline today....