Re: [Full-Disclosure] spamming trojan?

2004-06-17 Thread Aditya, ALD [ Aditya Lalit Deshmukh ]
http://upx.sourceforge.net/#download upx is a cross platfrom executable file compreession tool By chance, do you know of a similar tools that runs under linux? maybe u want a debugger and not a file compreession tool ? -aditya ÿÿ éb½êÞvëž

Re: [Full-Disclosure] spamming trojan?

2004-06-17 Thread Aditya, ALD [ Aditya Lalit Deshmukh ]
Looks the june4.exe is some kind of spyware. It reference to another site cjdra.com, possibly uploading user information there. By chance, do you know of a similar tools that runs under linux? gdb or under softice under wine ? -aditya

Re: [Full-Disclosure] RE: [ GLSA 200406-10 ] Gallery: Privilege escalation vulnerability

2004-06-17 Thread Aditya, ALD [ Aditya Lalit Deshmukh ]
please stop spamming the list with your advertisiement of partner programs - Original Message - From: Bob Walton [EMAIL PROTECTED] To: 'Thierry Carrez' [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 9:27 PM

[Full-Disclosure] [Fwd: Caveat Lector: Beastie Boys Evil]

2004-06-17 Thread list
Original Message Subject: Caveat Lector: Beastie Boys Evil Date: Wed, 16 Jun 2004 01:10:23 -0700 From: Dragos Ruiu [EMAIL PROTECTED] Organization: All Terrain Ninjas To: [EMAIL PROTECTED] Well I truly regret actually purchasing a copy of the new Beastie Boys album to support

Re: [Full-Disclosure] Akamai

2004-06-17 Thread Niek Baakman
Niek Baakman wrote: Hi list, akamai disappeared from the internet about an hour ago. (all their dns servers are dead, hence many companies that use akamai are unreachable: microsoft.com/liveupdate.symantec.com apple/some search engines) Does anyone know if it is security-related (ddos, something

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Todd Burroughs
They are planning to get into a market that gaurds against the failures in their own product. I don't like this, as it seems that they are going to be in a position to intentionally make holes that their anti-virus software will fix. If we had a more competitive market in this type of software

[Full-Disclosure] SUSE Security Announcement: subversion (SuSE-SA:2004:018)

2004-06-17 Thread security
-BEGIN PGP SIGNED MESSAGE- __ SUSE Security Announcement Package:subversion Announcement-ID:SuSE-SA:2004:018 Date:

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Chris Cappuccio
Todd Burroughs [EMAIL PROTECTED] wrote: They are planning to get into a market that gaurds against the failures in their own product. I don't like this, as it seems that they are going to be in a position to intentionally make holes that their anti-virus software will fix. If we had a more

[Full-Disclosure] [ GLSA 200406-13 ] Squid: NTLM authentication helper buffer overflow

2004-06-17 Thread Kurt Lieber
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

[Full-Disclosure] USB Auto run function

2004-06-17 Thread martin paul
I have been interested in a potential exploit that may or may not be an issue, I read lately that a potential malicious file could enter a system via a USB Memory stick with a structured autorun.pif , and this file would operate even if the screen lock is activated .

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread npguy
M$ anti-virus free with every Outlook 2005. On Thursday 17 June 2004 08:41 am, Chris Cappuccio wrote: I hate to say this, but I don't think Microsoft software could be any worse than Symantec... Andre Ludwig [EMAIL PROTECTED] wrote: Think the mafia refers to this as a protection racket...

Re: [Full-Disclosure] [Fwd: Caveat Lector: Beastie Boys Evil]

2004-06-17 Thread KF (lists)
The Xbox attempts to rip your audio to the hard disk before playing it right? This CD really sounds like crap on my Xbox... I am wondering if the audio cuts in and out because of the copy protection they try to use. -KF [EMAIL PROTECTED] wrote: Original Message Subject: Caveat

Re: [Full-Disclosure] USB Auto run function

2004-06-17 Thread Lan Guy
Not quite, In Windows XP SP2 the system can read the autorun.inf in removeable media (specifically USB Flash Drives) and start a program or install etc like a CD rom does. However I haven't seen it work. Lan guy - Original Message - From: martin paul [EMAIL PROTECTED] To: [EMAIL

Re: [Full-Disclosure] USB Auto run function

2004-06-17 Thread Harlan Carvey
I have been interested in a potential exploit that may or may not be an issue, I read lately that a potential malicious file could enter a system via a USB Memory stick with a structured autorun.pif , and this file would operate even if the screen lock is activated . This is an

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread joe
My initial thought of a response to this was something along the lines of do you wear an aluminum foil helmet as you seem to fit the profile... I decided against that. I mean I still think it but I think this response is better Antivirus software will probably always be around. Why? Because

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Eric Paynter
On Thu, June 17, 2004 2:45 am, Chris Cappuccio said: The fact that Microsoft has the monopoly reflects social and economic values, not technical ones. I'm not sure if values is the right word. They got there by signing an exclusive deal with IBM back when IBM made the only serious business

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Steffen Schumacher
On 17.06.2004 10:11:06 +, joe wrote: My initial thought of a response to this was something along the lines of do you wear an aluminum foil helmet as you seem to fit the profile... I decided against that. I mean I still think it but I think this response is better Antivirus software

[Full-Disclosure] Re: [ GLSA 200406-12 ] Webmin: Multiple vulnerabilities

2004-06-17 Thread Larry
I have made several attempts to validate the GPG key on this document with GnuPG 1.2.4 and have been unsuccessful at importing the key. Please advise. On Wednesday 16 June 2004 08:31 am, Kurt Lieber wrote: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread joe
However the worms would be blocked if people had patched their machine or otherwise properly administrated the machines they were responsible for. All of the worms that I think you are probably referring to all had patches well in advance of the worm that impacted it, blaster, slammer, sasser,

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread DAN MORRILL
You make anti virus software sound like a gun lock on a 9MM. Does it really matter who is in the anti-virus market? If Microsoft goes that way, and they have the best knowledge of what they created, what we can reasonably expect to see in the words of Bill Gates Innovation, with rich user

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Eric Paynter
On Thu, June 17, 2004 8:51 am, DAN MORRILL said: Does it really matter who is in the anti-virus market? If Microsoft goes that way, and they have the best knowledge of what they created... (puts on tinfoil hat) From a paranoid point of view, best knowledge of what they created is a little

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Joshua Levitsky
- Original Message - From: DAN MORRILL [EMAIL PROTECTED] Sent: Thursday, June 17, 2004 11:51 AM Subject: Re: [Full-Disclosure] MS Anti Virus? You make anti virus software sound like a gun lock on a 9MM. Does it really matter who is in the anti-virus market? If Microsoft goes that

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Steffen Schumacher
On 17.06.2004 11:51:46 +, joe wrote: However the worms would be blocked if people had patched their machine or otherwise properly administrated the machines they were responsible for. All of the worms that I think you are probably referring to all had patches well in advance of the worm

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Valdis . Kletnieks
On Wed, 16 Jun 2004 15:53:45 PDT, Andre Ludwig [EMAIL PROTECTED] said: Asked if that would hurt sales of competing products, such as Network Associates' McAfee and Symantec's Norton family of products, Nash said that Microsoft said that it would sell its anti-virus program as a separate

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Alfie
On Thu, Jun 17, 2004 at 10:11:26AM -0700, Eric Paynter wrote: On Thu, June 17, 2004 8:51 am, DAN MORRILL said: Does it really matter who is in the anti-virus market? If Microsoft goes that way, and they have the best knowledge of what they created... (puts on tinfoil hat) From a

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread joe
I think you will be pleasantly surprised by XP SP2 and XP Reloaded and Windows Server R2. They are listening and they are correcting. On the services running by default front, MS has finally come around that corner, if you have installed 2K3 you will note a large reduction in what is installed

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Pavel Kankovsky
On Thu, 17 Jun 2004, joe wrote: Home users never should have been impacted as they should be running firewall software on the internet connections. The fact that they don't isn't MS's fault, however MS is stepping up with XP SP2 to help out. On top of that they should be patching when

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Gregory A. Gilliss
Dan et al: You are missing the point here. While it matters little *who* is in the A/V market, it matters very much when one player is Microsoft, because the M$ business model (according to them and to the US DOJ) is to enter a market, undercut the market, co-opt the market, drive out the

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Nick FitzGerald
[EMAIL PROTECTED] wrote: Naah.. They'd never use an undocumented API to benefit their product at the expense of the competition, would they? ;) In this case, no. Given that a lot of AV technical work is reverse engineering and that most of the best AV reversers are not among those MS

Re: [Full-Disclosure] Re: [ GLSA 200406-12 ] Webmin: Multiple vulnerabilities

2004-06-17 Thread Valdis . Kletnieks
On Thu, 17 Jun 2004 09:40:20 CDT, Larry [EMAIL PROTECTED] said: I have made several attempts to validate the GPG key on this document with GnuPG 1.2.4 and have been unsuccessful at importing the key. Please advise. Would you go to your mechanic and say Fix my car, it's broken, or would

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Dan B. Mann
From my perspective, a place that MS needs to also focus on is the patch scanning technology. SMS, WindowsUpdate, MBSA, all can give different, confusing results even when scanning the same machine! Please, give me a scanner that covers all of your internal products, and gives reliable

[Full-Disclosure] [ GLSA 200406-14 ] aspell: Buffer overflow in word-list-compress

2004-06-17 Thread Thierry Carrez
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Full-Disclosure] MASS spam emails from .tw and . BL domains

2004-06-17 Thread MIKE TOLBERT
Over the last two days we have received an increase in SPAM from Taiwan, it has since moved to Latin America. The emails contain: MAIL From: [EMAIL PROTECTED]and other names Subject: (high bit characters) Body of the email contains Base64 encoding. All originating from a .tw domain.

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Steffen Schumacher
I also agree that MS *is* turning their gigantic boat around with regards to security. I have yet to see all the new stuff in detail, but what I've heard, I've liked! In my line of work (ISP) it will be greatly welcomed to have more OS' less prone to become infected by worms, as it allows for

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Ron DuFresne
On Thu, 17 Jun 2004, Dan B. Mann wrote: From my perspective, a place that MS needs to also focus on is the patch scanning technology. SMS, WindowsUpdate, MBSA, all can give different, confusing results even when scanning the same machine! Please, give me a scanner that covers all of

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Ron DuFresne
They did this years back in the 90's anyone remember pctools, and their offerings? Guess what was bundled under DOS 6.2, might have gone back to DOS 6.0, but, pctools is no longer in the market...and was the norton counterpart/competition at the time...so, this would be a reentry... Thanks,

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Valdis . Kletnieks
On Fri, 18 Jun 2004 06:30:55 +1200, Nick FitzGerald [EMAIL PROTECTED] said: [EMAIL PROTECTED] wrote: Naah.. They'd never use an undocumented API to benefit their product at the expense of the competition, would they? ;) In this case, no. Given that a lot of AV technical work is

Re: [Full-Disclosure] MASS spam emails from .tw and . BL domains

2004-06-17 Thread Mohit Muthanna
hmmm... sounds like spammers rerouting in response to comcast blocking port 25 on a large number of subscribers. that (i.e., comcast's actions) _did_ have a significant effect on the amount of spam being sent out. and as expected, it's effects were short term... if only more service providers

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread rob
On Thu, Jun 17, 2004 at 11:51:46AM -0400, joe wrote: However the worms would be blocked if people had patched their machine or otherwise properly administrated the machines they were responsible for. All of the worms that I think you are probably referring to all had patches well in advance of

RE: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Poof
Gregory: According to Microsoft they are making their A/V a separate product. So it'll be sold much like Microsoft Money is. ~ So if M$ enters the A/V market and bundles their solution with Windows whatever, they likely will drive Symantec and McAfee out of the market over time by co-opting

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Mohit Muthanna
You really expect us to believe that the M$ AV team won't leverage off the fact that they could know about that API, and all the others in Windows? in addition, given that they have the sources to their own OS, i doubt they really have to do much manual reversing... i'm sure the debugging tools

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Valdis . Kletnieks
On Thu, 17 Jun 2004 17:37:11 EDT, Mohit Muthanna said: You really expect us to believe that the M$ AV team won't leverage off the fact that they could know about that API, and all the others in Windows? in addition, given that they have the sources to their own OS, i doubt they really have

[Full-Disclosure] Spam Solution

2004-06-17 Thread Alavan
Please correct me if I'm missing something here: Microsoft and POBOX.com support Caller ID and SPF to help thwart phishing and SPAM. I can see it helping phishing (kind of) as the phishers won't be able to forge the FROM address. But, that won't stop naive users from entering their personal

Re: [Full-Disclosure] Spam Solution

2004-06-17 Thread Nils Ketelsen
On Thu, Jun 17, 2004 at 03:53:25PM -0700, Alavan wrote: Please correct me if I'm missing something here: You are missing the fact, that it also breaks email forwarding. And if the From header is analyzed (and that would be necessary for the fishing prevention, because THAT is what the users get

[Full-Disclosure] Re: Spam Solution

2004-06-17 Thread Riad S. Wahby
Alavan [EMAIL PROTECTED] wrote: It seems to me that if we make all MTA's register somehow (both SMTP and POST), this would eliminate the hijacked machine as spambot phenomenon. We already have MX records for SMTP, but a lot of providers use different machines to receive (via SMTP) and send

Re: [Full-Disclosure] Akamai

2004-06-17 Thread Darren Reed
In some mail from Paul Schmehl, sie said: --On Wednesday, June 16, 2004 11:53:23 AM +1000 Darren Reed [EMAIL PROTECTED] wrote: This is a whole new play ground for organised crime, mostly thanks to Microsoft. You've got millions of PC's around the world that are largely, in one way or

Re: [Full-Disclosure] MS Anti Virus?

2004-06-17 Thread Aditya, ALD [ Aditya Lalit Deshmukh ]
it is an admin issue. that is very true, like the programmers have become code monkeys, sysadmin netadmins have become patch monkeys The *real* IT department could then link to the executeable and place it on an intranet server which would be secure. This is an interesting

Re: [Full-Disclosure] [Fwd: Caveat Lector: Beastie Boys Evil]

2004-06-17 Thread Eric Paynter
The sad part about this entire topic is the futility of attempting to copy protect in the first place. So they install some software and Mac and Win... then some Linux kiddie rips the CD and puts it on P2P and it's out now for the whole world. All it takes is one person to break it and it's all