Re: *****SPAM***** Re: [Full-disclosure] Compromising pictures of Microsoft Internet Explorer!

2005-07-17 Thread Georgi Guninski
oh, no. long time no m$ puppies whining publicly. On Sat, Jul 16, 2005 at 07:43:32PM +, [EMAIL PROTECTED] wrote: I do not meen to flame you, but you are an irresponsible disgrace to the hacking community. Do you not care about the customer? You never publicly disclose details to a

Re: [Full-disclosure] Compromising pictures of Microsoft Internet Explorer!

2005-07-17 Thread Michal Zalewski
On Sat, 16 Jul 2005, [EMAIL PROTECTED] wrote: I do not mean to flame you, but you are an irresponsible disgrace to the hacking community. You do mean to flame me, apparently, and constructing sentences this way makes them unintentionally funny. Pretty much like saying Sir, with all due

[Full-disclosure] [ZH2005-16SA] Skype for Linux: Insecure temporary file creation

2005-07-17 Thread Giovanni Delvecchio
[ZH2005-16SA] Skype for Linux: Insecure temporary file creation * UPDATE 17th July 2005 Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [EMAIL PROTECTED] About Skype Skype is a free program that

Re: [Full-disclosure] Compromising pictures of Microsoft Internet Explorer!

2005-07-17 Thread Bernhard Mueller
Mr. Zalewski's statement about the undue burden that Microsoft's investigative processes place on the researcher is indeed accurate. The only time I've had any success working with Microsoft was when the issue was a straightforward code execution scenario. Oh wait... even then, I'm blown

Re: [Full-disclosure] RE: Why Vulnerability Databases can't do everything

2005-07-17 Thread Steven M. Christey
security curmudgeon said: Consider that we already have government coordination for vulnerabilities. In fact, did you know we have it half a dozen times over? ... Little overlap? You bet there is. The CERT, CVE, and ICAT efforts are complementary. CERT deals with large-scale disclosures,

Re: [Full-disclosure] Compromising pictures of Microsoft Internet Explorer!

2005-07-17 Thread Tom Ferris
Bernhard Mueller wrote: Mr. Zalewski's statement about the undue burden that Microsoft's investigative processes place on the researcher is indeed accurate. The only time I've had any success working with Microsoft was when the issue was a straightforward code execution scenario. Oh wait...

[Full-disclosure] Shorewall MACLIST Problem

2005-07-17 Thread Patrick Blitz
Shorewall MACLIST Rules-Override Problem Release Date: 17.07.05 Severity: High Affected Version: Shorewall 2.2.x and 2.4.x Synopsis: A Problem has been reported in the Shorewall Firewall (http://shorewall.net) that enables