Re: [Full-disclosure] FW: Your email message was blocked

2010-12-24 Thread Georgi Guninski
On Fri, Dec 24, 2010 at 12:42:18AM +, Thor (Hammer of God) wrote: Classic. Just send him an email with the link you want from whatever address you want, and you can spam people with the subject, including links. :) Extra points for wording: 6740 13:23:32.532 1 user(s) match rule -

Re: [Full-disclosure] [IMF 2011] 2nd Call - Deadline Extended - Addenunm

2010-12-24 Thread Oliver Goebel
Addenum: Merry Christmas to everyone! Ollie -- Oliver Goebelmailto:goe...@cert.uni-stuttgart.de Stabsstelle DV-Sicherheit (RUS-CERT) Tel:+49 711 685 1 CERT Universitaet Stuttgart Tel:+49 711 685 8-3678 / Fax:-3688 Breitscheidstr. 2, 70174 Stuttgart

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Marsh Ray
I agree that there's a good paper in this, I would love to see the entropy added by the multi-consumer model quantified, or even an upper bound placed on it. In the past when I've given my talk on randomness in the OpenBSD network stack, I've discussed this and I always ask for someone to

Re: [Full-disclosure] [IMF 2011] 2nd Call - Deadline Extended - Addenunm

2010-12-24 Thread Marsh Ray
On 12/24/2010 03:51 AM, Oliver Goebel wrote: Addenum: Merry Christmas to everyone! Ollie +1! - Marsh ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia -

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Григорий Братислава
Hello full disclosure!!! I'd like to warn you about many things but not bucketing. However is you must read and not be troll for you is to understand this for your own. musntlive cannot be all everyone's guide to common sense. A Provably Secure And Efficient Countermeasure Against Timing Attacks

[Full-disclosure] [ MDVSA-2010:251-1 ] firefox

2010-12-24 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2010:251-1 http://www.mandriva.com/security/

Re: [Full-disclosure] How long was the twitter outage?

2010-12-24 Thread Josey Yelsef
As much as your revenue stream. Is their a security 0day for being a spoiled, rotten manchild? http://valleywag.gawker.com/5317292/twitter-co+founder-moving-out-of-minimalist-poets-cottage/gallery/ Enjoy your bubble while it lasts moron. Google the definition of fad. It'll be sweet justice

Re: [Full-disclosure] How long was the twitter outage?

2010-12-24 Thread Eyeballing Weev
See also Xanga after Myspace came into town and Myspace when Facebook appeared on the scene. Better cash in on Twitter ASAP and move on to your next startup. On 12/24/2010 09:15 AM, Josey Yelsef wrote: As much as your revenue stream. Is their a security 0day for being a spoiled, rotten

[Full-disclosure] [US-2010-xmas]: American Women are lazy, hypocritical, corpulent, psychotic thieves. People are treacherous and worthless.

2010-12-24 Thread Josey Yelsef
Yes sheep, hypocrisy is here. Related: http://seclists.org/fulldisclosure/2010/Nov/125 In the form of your 500 pound BBW wife. Enjoy the pig owning your house and driving your life into the ground. Have you ever seen rape before? You need not look far. View the dockets in any divorce court to

[Full-disclosure] [ MDVSA-2010:251-2 ] firefox

2010-12-24 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2010:251-2 http://www.mandriva.com/security/

[Full-disclosure] OpenBSD CD's NSA crafted

2010-12-24 Thread Dave Nett
Hi list I warn you, Has I say here more reveals of our favoorite backdoored system. OpenBSD songs has crafted by NSA agents to send subliminal message. Be warned by me that anyone who listen to the songs will unawarelessly get brain sucked by OpenBSD, Theo and pro-USA thoughts. The technic uses

Re: [Full-disclosure] How long was the twitter outage?

2010-12-24 Thread Cal Leeming [Simplicity Media Ltd]
o_O On Fri, Dec 24, 2010 at 2:15 PM, Josey Yelsef hg_expo...@yahoo.com wrote: As much as your revenue stream. Is their a security 0day for being a spoiled, rotten manchild? http://valleywag.gawker.com/5317292/twitter-co+founder-moving-out-of-minimalist-poets-cottage/gallery/ Enjoy your

Re: [Full-disclosure] FW: Your email message was blocked

2010-12-24 Thread Cal Leeming [Simplicity Media Ltd]
I think we should all thank Georgi for starting the twitter discussion and thus bringing us many luls in the form of yet another retarded content filtering system.. And to think I was bitching about it to begin with lmao. On Fri, Dec 24, 2010 at 8:19 AM, Georgi Guninski

[Full-disclosure] Security Advisory - FlexVision Listener Vulnerability

2010-12-24 Thread Victor Ribeiro Hora
=[ Tempest Security Intelligence - Advisory #02 / 2010 ]= Information Disclosure Vulnerability in FlexVision Agent Listener - Authors: Victor Ribeiro Hora victor *SPAM* tempest.com.br

[Full-disclosure] OpenBSD - grey user's oppinion.

2010-12-24 Thread asmo
reading this whole discussion, did you ever considered if grey user, just like me, will ever care ? if backdooring major *bsd distribution will make a difference whether to choose OpenBSD or something else when it's really no real choice between backdoored or not backdoored distro have any

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread McGhee, Eddie
I is Love musntlive. -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of ?? Sent: 24 December 2010 13:05 To: coderman Cc: full-disclosure@lists.grok.org.uk; mic...@lucifer.net Subject: Re:

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Gary Baribault
Well that makes one of you!!! ;-) Gary B On 12/24/2010 09:18 AM, McGhee, Eddie wrote: I is Love musntlive. -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of ?? Sent: 24 December 2010

Re: [Full-disclosure] OpenBSD - grey user's oppinion.

2010-12-24 Thread Thor (Hammer of God)
If you don't care, then what makes you think anyone else will care that you don't care? Is your intent to tell the list that you don't care about the topic? -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure- boun...@lists.grok.org.uk] On

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread coderman
On Fri, Dec 24, 2010 at 1:53 AM, Marsh Ray ma...@extendedsubset.com wrote: ... So there are these many hundreds of lines of entropy management code in OpenBSD implementing what is claimed to be a novel architecture for random number generation and yet this guy, who is going around giving talks

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread BMF
On Fri, Dec 24, 2010 at 4:27 PM, coderman coder...@gmail.com wrote:  how many of you have a competent userspace entropy daemon funneling hardware sources into host pool? It would be nice if there were inexpensive hardware sources available and a means to distribute the entropy among hosts in

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Dan Kaminsky
On Fri, Dec 24, 2010 at 4:37 PM, BMF badmotherfs...@gmail.com wrote: On Fri, Dec 24, 2010 at 4:27 PM, coderman coder...@gmail.com wrote: how many of you have a competent userspace entropy daemon funneling hardware sources into host pool? It would be nice if there were inexpensive hardware

Re: [Full-disclosure] OpenBSD - grey user's oppinion.

2010-12-24 Thread Marsh Ray
Well you've been on this list longer than I have Thor, I'd've thought you'd figured it out by now. The point is to keep the top-posting email chain as long and as wasteful of everybody's time as possible! It's a game called meta trolling and it's just a slightly less creative version of

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Marsh Ray
On 12/24/2010 07:08 PM, Dan Kaminsky wrote: Don't we have hardware RNG in most motherboard chipsets nowadays? (Not that you should exclusively trust it, but the nature of RNG's is that it's easy to mix in sources.) Haha, you're going to love this:

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread Marcio B. Jr.
Such a gay thread subject, ain't it? On Fri, Dec 24, 2010 at 11:24 PM, Marsh Ray ma...@extendedsubset.com wrote: On 12/24/2010 07:08 PM, Dan Kaminsky wrote: Don't we have hardware RNG in most motherboard chipsets nowadays? (Not that you should exclusively trust it, but the nature of RNG's

Re: [Full-disclosure] OpenBSD - grey user's oppinion.

2010-12-24 Thread Dave Nett
You has not know what theses guys are able  to do. There are very very dangerous. Be warned by me Dave. So you hasn't want to open the doors to your system to these men. Anyway here has the way to always use OpenBSD (from a long time ago to me) within 10 rules : 0x01 standalone test machine

Re: [Full-disclosure] how i stopped worrying and loved the backdoor

2010-12-24 Thread BMF
On Fri, Dec 24, 2010 at 5:08 PM, Dan Kaminsky d...@doxpara.com wrote: Don't we have hardware RNG in most motherboard chipsets nowadays? Do we? By what mechanism do they operate? Thermal noise seems the easiest way to go although I have always preferred the idea of sampling random radioactive