Re: [Full-disclosure] PHC is _NOT_ DEAD !!!!

2010-01-21 Thread dramacrat
why you gotta say shit like that my spamfilter is crying now 2010/1/22 Rohit Patnaik > Heh. I agree, but only because this month has been a fairly quiet one > regarding n3td3v drama. > > --Rohit Patnaik > > > On Thu, Jan 21, 2010 at 10:20 AM, Christian Sciberras > wrote: > >> Vote +1 for "mes

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-21 Thread dramacrat
inb4 front page news 2010/1/21 > > Well, that's exactly what I'm saying. Pretending that this is some kind > new > > exploit class simply because Google Wave is used is stupid. This is the > > logical extension of e-mail and instant message and social network > attacks > > to the next potentia

Re: [Full-disclosure] Two MSIE 6.0/7.0 NULL pointer crashes

2010-01-20 Thread dramacrat
Fuck yeah. Mozilla would be able to hire a few more developers, excellent! I've always felt that they're held back by an overly small development team - while this results in a clean, stable, fast browser, it means they can't support enough other stuff :( Oh... wait... 2010/1/21 James Matthews

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread dramacrat
This is the stupidest advisory I have read on this list in at least two months. 2010/1/19 NSO Research > _ > Security Advisory NSOADV-2010-002 > _ > _ > > > Title:

Re: [Full-disclosure] Google Maps XSS (currently unpatched)

2010-01-12 Thread dramacrat
ah, Google... the only company in IT that can have an unpatched vulnerability released to the world and get good publicity out of it. Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I have friends that work for them, and I like to see a company like them doing well. Still, I can

Re: [Full-disclosure] Surge in Skype Spam activity

2010-01-11 Thread dramacrat
h, shall I click a tinyurl coming from a f-d poster? n/n, pick one this is email, not twitter. if you're sharing a legitimate link, there's no reason not to directly link to it. 2010/1/11 Chen Levkovich > Surge in Skype Spam activity. http://tinyurl.com/yc38trm > > > >

Re: [Full-disclosure] Google Chrome 3.0.195.33 leaks DNS data queries outsitde of proxy if dns pre-fetching is enabled

2009-12-16 Thread dramacrat
make their awesome comeback. If your grammar and syntax are as bad in programming languages as in English, you must be a real liability to employ. 2009/12/16 Milan Berger > On Wed, 16 Dec 2009 00:54:44 +1100 > dramacrat wrote: > > > *first at all, send to the list please not

Re: [Full-disclosure] Google Chrome 3.0.195.33 leaks DNS data queries outsitde of proxy if dns pre-fetching is enabled

2009-12-15 Thread dramacrat
*first at all, send to the list please not to me personally and list in cc.* * * *Ignoring the grammar, that's exactly what you just did. And what I just did, because that's default client behavior on a Reply-To-All. * 2009/12/16 Milan Berger > Hi Vlad, > > first at all, send to the list please n

Re: [Full-disclosure] Microsoft: ‘Piracy no longe r poses a threat to us’

2009-12-03 Thread dramacrat
Hahaha. How many legit copies of Windows 7 Ultimate have they sold? Three? Or was it four? I guess this is their way of competing with free software... making *their* software free (yes, yes, money-free vs freedom-free, i know) except to those thick enough (or lawsuit vulnerable enough, ie govern

Re: [Full-disclosure] more on that

2009-11-25 Thread dramacrat
well, all that really depends on the theory that the OP actually read it prior to executing it. 2009/11/26 Andrew Farmer > On 24 Nov 2009, at 13:41, Tyler Durten wrote: > > And this is what I'm talking about: > > http://seclists.org/fulldisclosure/2005/Apr/412 > > > ... which reads, in part: > >

[Full-disclosure] Remote DoS condition in harbour.pl

2009-11-24 Thread dramacrat
Versions of harbour.pl (up to and including build 1941) are vulnerable to a remote Denial of Service attack. Spamming "zeroes" (null packets) to port 1207 results in a large portion of system resources being tied up. Please update to build 1945 as soon as possible. ___

Re: [Full-disclosure] Meet Kurt Greenbaum, Director of Social Media, St. Louis Post-Dispatch, Reports commenter to employer.

2009-11-19 Thread dramacrat
They're ORs, unfortunately. The language is unclear but it seems to be one of those infernal boilerplate pieces of shit that basically invalidate the assurances as to privacy. You could still probably press the suit. "Unauthorised use" has recently been defined and redefined, it's an evolving piec

Re: [Full-disclosure] How Prosecutors Wiretap Wall Street

2009-11-09 Thread dramacrat
The only "property" in a tweet or email is intellectual property, and that remains the property of the sender... in my jurisdiction, at least, which isn't even a US one. Also, this is the most pathetic nerd-fight I have seen for many a year. 2009/11/10 Paul Schmehl > I fail to see how that appl

Re: [Full-disclosure] How to receive SPAM mail

2009-11-07 Thread dramacrat
If you want to be spammed, join full-disclosure. 2009/11/7 Michael Holstein > > > I have a SPAM filter and virus firewall testing. > > So, I want to get the real SPAM is sent to a specific email address. > > What better way is there anything? > > > > I had to do a similar thing when doing a spam

Re: [Full-disclosure] Weev, AKA Andrew Auernheimer [Fullinfo Doc(TM) revision #1]

2009-10-04 Thread dramacrat
So if I'm to understand you correctly, "gobbles 1337", Weev's mother or a family member was searching the family name randomly on Google, came across these threads, did *not* email the list but instead emailed you with a long list of abuse about Weev, within which she did not disclose any informati

Re: [Full-disclosure] So weev...

2009-10-02 Thread dramacrat
I wouldn't be too concerned if I was weev. A guy who uses phrases like *alleged suspect* and* likelihood chance* is after him! Oh dear, he must be going to accuse weev of being an *illegal criminal*! 2009/10/3 GOBBLES > This is about fighting crime. Not about putting your stuff into the alleged

Re: [Full-disclosure] So weev...

2009-10-02 Thread dramacrat
Man, you guys are real elite hackers. You can get into *#ed* and read the chat. Holy fuck, you penetrated the public channel of Encyclopedia Dramatica, which as we all know is the world's most elite hacker crew. 2009/10/2 Wintermute > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > We are gl

Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers

2009-09-29 Thread dramacrat
yes yes, the local root shouldn't know the passwords of the users just like the users shouldn't reuse passwords. But we're meant to be dealing with the real world, right? 2009/9/30 > >> All standard users have read access to /var/log/auth, so if root > > > > they shouldn't, at least on my defau

Re: [Full-disclosure] Andrew Auerenheimer aka weev gets tree'd

2009-09-16 Thread dramacrat
yes. who the fuck is this weev guy, anyway? 2009/9/17 zewb > Same here. I wanted to learn about security flaws and instead it's just > all these dumb fags pretending they've doxed some big important person. What > the fuck is this, 4chan or something? It's full disclosure of security > holes, n

Re: [Full-disclosure] Hack-Mail.net or similar site

2009-09-12 Thread dramacrat
How could you question them? They "Are Completely annonymous"! 2009/9/12 TheLearner > Sounds like a sting operation. > > I mean, can you read this? They're talking to you like putting > hacked password in white text on white paper makes it less illegal > and somehow legit. > > A shakespear scrip

Re: [Full-disclosure] Plain Text Password Disclosure vulnerability in rediff mail

2009-09-10 Thread dramacrat
fuck.kaminsky 2009/9/11 Dan Kaminsky > Beyond that, most web applications that do use SSL, still forget to set > their cookies to secure (see > http://fscked.org/blog/incomplete-list-alleged-vulnerable-sites ). Not to > mention the hordes of sites that have SSL logins off HTTP pages. Even the

Re: [Full-disclosure] Web-monitoring software gathers data on kid chats

2009-09-08 Thread dramacrat
hahahaha oh man, that's grand. 2009/9/9 Ivan . > Parents who install a leading brand of software to monitor their kids' > online activities may be unwittingly allowing the company to read > their children's chat messages — and sell the marketing data gathered. > > Software sold under the Sentry

Re: [Full-disclosure] Sexless schadenfreude: the potential extremist Michael Crook.

2009-08-25 Thread dramacrat
He's a friendless loser with no skills nor intelligence. There's probably twenty million of them on the internet; the only difference between this one and the others is that Michael hasn't discovered /b/ yet. 2009/8/25 Michael Crook > "Some kid died. I want someone caring liberal to hug me, but