Re: [Full-disclosure] Blocking Skype

2005-11-14 Thread Kevin
On 11/13/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I have had no problems at all with the above setup, and as a result, only Skype is blocked, as most(if not all) companies serious about having a web presence have registered domains and hence are referenced by their FQDN URLs. This will

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread poo
hhh beware or the n3td3v kidz0r will p4ck37 j00!!!11oneonelolz On 11/14/05, InfoSecBOFH [EMAIL PROTECTED] wrote: You're maing a complete idiot of yourself, because the world is watching and the powers that be at Yahoo would back up everything i've been sayingActually they won't.I have

Re: [Full-disclosure] FAO Mark Murtagh from Websense

2005-11-14 Thread poo
ý wrýte wid passi0n t00 !!wartevar cums ooout cums oouut On 11/13/05, n3td3v [EMAIL PROTECTED] wrote: WHAT, are you think launching personal attacks against someone issomthing to be proud of? I'm sure ifyou read the F-D charter infact its outlawed on this list. I posted up something I

RE: [Full-disclosure] Phishing attack. Basic encoding

2005-11-14 Thread Peter Kruse
Hi Peter, I have had a number of reports of messages targetting users on domains for their credentials. The interesting part of this message is the very basic but effective encoding of the message. It appears that there are a couple of characters that instruct the mail program to display

Re: [Full-disclosure] Blocking Skype

2005-11-14 Thread Polarizer
acl connect method CONNECT This line is not necessary since standard squid.conf contains this line: acl CONNECT method CONNECT so simply use the uppercase version (squid does not check upper and lower case in acl names) # Apply your acls http access deny connect numerics_IPs all Respect

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Peer Janssen
Samuel Beckett wrote: On 11/14/05, Disco Jonny [EMAIL PROTECTED] wrote: I thought that this was an excellent bit of trolling and deserving of food, until google and boredom brought me across this... http://forum.crime-research.org/teech-me-how-to-hack-vt6.html?highlight= I'm I

[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite

2005-11-14 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite Advisory ID: 68158 http://www.cisco.com/warp/public/707/cisco-sa-20051114-ipsec.shtml Revision 1.0 For Public Release 2005 November 14 1100 GMT (UTC

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Samuel Beckett
It makes sense to conduct a social engineering test against a forum, ask for help to become a hacker and use your homepage in the signature which states that you're already an experienced hacker since more than six years. On 11/14/05, Peer Janssen [EMAIL PROTECTED] wrote: How do you know these

[Full-disclosure] [SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution

2005-11-14 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 894-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze November 14th, 2005

Re: [Full-disclosure] Blocking Skype

2005-11-14 Thread Polarizer
No, the connect was certainly not a typo. But indeed the http access was. The 2nd typo was numerics_IPs instead of numeric_IPs. I think, it is o.k. to show up such pitfalls. BTW: I'm sure, it will break a lot of other things but skype, too. Do you mean I'm sure it will break a lot of other

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread poo
ITS A TRICK TO CONFUSE THE ENEMY HE IS TALKING ABOUT IN EARLIER POSTS !!!oneoneone lolz On 11/14/05, Samuel Beckett [EMAIL PROTECTED] wrote: It makes sense to conduct a social engineering test against a forum,ask for help to become a hacker and use your homepage in the

Re: [Full-disclosure] In Sony's Defense Over Virus Writers

2005-11-14 Thread Iadnah
I don't usually even say anything on this list, I just read for the most part, and I have to say n3td3v seems to be one of the singularly most annoying individuals I have ever seen anywhere on the internet. His messages are a waste of space in my inbox, and I'm sure other people feel the same

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Iadnah
_Obviously_ he's just asking so he can record the reaction of the hackers./sarcasm /me slaps ../../../../n3td3v On a more serious note, why would someone with so much experience and what not use a Geocities account for their website? You'd think someone with his experience could make a

RE: [Full-disclosure] Enough's enough...

2005-11-14 Thread ad
Have moved to xp 64 me so but honestly if it is for your girlfriend , I suggest here to stay on 32-bit because you have to find 64-bit drivers wich is not finger in the nose, many applications incompatibility, + if you wants to buy it you have to buy a small hardware with it nor with luck

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread James Eaton-Lee
On Mon, 2005-11-14 at 01:02 +, n3td3v wrote: Yet another fuckwit basing their opinion on someone they don't know. If it wasn't for me you wouldn't have an internet to sent your packets on right now. You take people at face value instead of getting to know them first. Oh no, guys! He's

[Full-disclosure] bug

2005-11-14 Thread sinneR
~~~ Application: Internet Explorer Vendors: http://www.microsoft.com Versions: 6.0.2900.2180.xpsp_sp2_rtm.040803-2158 Patched With: SP2; Platforms: Windows Bug: Remote File

[Full-disclosure] Walla TeleSite Multiple Vulnerabilities

2005-11-14 Thread sinneR
~~~ Application:Walla TeleSite Vendors:http://www.walla.co.il Versions: 3.0 and perior Platforms: Windows (ISAPI, a few vulnerabilities apply Linux too) Bug:Multiple Vulnerabilities

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Adam Jones
On 11/14/05, James Eaton-Lee [EMAIL PROTECTED] wrote: On Mon, 2005-11-14 at 01:02 +, n3td3v wrote: Yet another fuckwit basing their opinion on someone they don't know. If it wasn't for me you wouldn't have an internet to sent your packets on right now. You take people at face value

Re: [Full-disclosure] Phishing attack. Basic encoding

2005-11-14 Thread Brian Johnson
I was forwarded a very similiar message late last week. When I loaded the page in IE it brought up the homepage of the domain being phished and and a pop up window with a captcha image. Some more analysis of the page showed that the image was being pulled from a Russian email site while the rest

Re[2]: [Full-disclosure] Blocking Skype

2005-11-14 Thread phased
you can always add exceptions for popular sites that connect by IP, as there are not going to that many -Original Message- From: Polarizer [EMAIL PROTECTED] To: full-disclosure@lists.grok.org.uk Date: Mon, 14 Nov 2005 10:35:01 +0100 Subject: Re: [Full-disclosure] Blocking Skype acl

Re: [Full-disclosure] Blocking Skype

2005-11-14 Thread Andrew McGill
Polarizer wrote, acl connect method CONNECT This line is not necessary since standard squid.conf contains this line: acl CONNECT method CONNECT so simply use the uppercase version (squid does not check upper and lower case in acl names) # Apply your acls http access deny connect

Re: [Full-disclosure] Blocking Skype

2005-11-14 Thread Peter van den Heuvel
This line is not necessary since standard squid.conf contains this line: That has nothing to do with the proposed configuration. No serious squid implementation would have a standard ACL list, so every serious admin would rewrite them. And if you are serious you have some sort of convention

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Disco Jonny
I thought that this was an excellent bit of trolling and deserving of food, until google and boredom brought me across this... http://forum.crime-research.org/teech-me-how-to-hack-vt6.html?highlight= As for the lack of basic English skills, I think that this is done deliberately, if the

[Full-disclosure] [SECURITY] [DSA 893-1] New acidlab packages fix SQL injection

2005-11-14 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 893-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze November 14th, 2005

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-14 Thread Marco Ermini
On 11/8/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: [...] Note that rpm will only do that if the person who packaged the updated RPM specified a 'postinstall' scriptlet requesting it. So RPM *can* restart a daemon, but it's a function of the package, not of rpm. [...] Sorry for the late

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Ken Pfeil
I should add that the page below has been updated on wiki with an example. Whomever did that, Thanks! :) Ken Pfeil wrote: Please do not feed n3td3v.. http://tinyurl.com/28o42 Thank you for your cooperation. We now return you to your regularly scheduled program How I saved the Internet

[Full-disclosure] MD4 and MD5 collision generators

2005-11-14 Thread pstach
I am releasing my collision generators for MD4 and MD5. They have significant time improvements over the ones described in the papers by Wang, et al. MD4 collisions can be generated almost instantly, MD5 can be generated in approximately 45 minutes on my p4 1.6ghz (on average).

[Full-disclosure] Blocking Skype

2005-11-14 Thread dsluser
Hi, I'd like to thank all of you for your feedback. I also apologise for the ugly typo that should've been anywhere but in the line applying the ACL exactly where I was really trying to make a point ! As I mentioned in my original post, I have had no issues at my workplace with this

Re: [Full-disclosure] FAO Mark Murtagh from Websense

2005-11-14 Thread Rob Thompson
On 11/13/05, n3td3v [EMAIL PROTECTED] wrote: EMINEM LYRICS Say What You Say This thread, is it some kind of a joke? As I sit here and read this, I keep glancing at my phone waiting for it to display April 1... http://www.geocities.com/n3td3v/home/hackerstoday.html; Is like a bad accident.

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Y'know...I usually take what you have to say with a grain of salt...and maybe a few grains of pain killer...and let it go, but enough already. If it wasn't for me you wouldn't have an internet to sent your packets on right now?? There have been a

Re: [Full-disclosure] FAO Mark Murtagh from Websense

2005-11-14 Thread Rob Thompson
On 11/13/05, n3td3v [EMAIL PROTECTED] wrote: I never said MW was right or wrong. Morning Wood didn't launch a personal attack on me. You were just someone who came on the thread and started your attacks. If it was anyone's position to launch a personal attack against me, it was MW and no one

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Technica Forensis
On 11/14/05, Samuel Beckett [EMAIL PROTECTED] wrote: http://forum.crime-research.org/teech-me-how-to-hack-vt6.html?highlight= I'm I want to become a hacker. By the way, whats netbus? Posted: Sun Mar 27, 2005 7:30 pm http://www.geocities.com/n3td3v/home/about.html Extensive on hands hacker

Re: [Full-disclosure] FAO Mark Murtagh from Websense

2005-11-14 Thread Byron L. Sonne
As I sit here and read this, I keep glancing at my phone waiting for it to display April 1... http://www.geocities.com/n3td3v/home/hackerstoday.html; What amazed me is that the dude had the chutzpah to post a link hosted on geocities, and expected to be taken seriously!

[Full-disclosure] [FLSA-2005:123013] Updated xchat package fixes security issue

2005-11-14 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated xchat package fixes security issue Advisory ID: FLSA:123013 Issue date:2005-11-14 Product: Fedora Core Keywords: Bugfix

[Full-disclosure] [FLSA-2005:152794] Updated rp-pppoe package fixes security issue

2005-11-14 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated rp-pppoe package fixes security issue Advisory ID: FLSA:152794 Issue date:2005-11-14 Product: Red Hat Linux, Fedora Core Keywords:

[Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated bzip2 packages fix security issues Advisory ID: FLSA:158801 Issue date:2005-11-14 Product: Red Hat Linux, Fedora Core Keywords:

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Rembrandt
Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? I'm sure you've an OWN mailinglist for such things. If not: Create one Such things just suck and NERVE all others who don't use the OS/Distri. It's not related to you personaly and you're not

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Byron Sonne
Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? I don't find those mailings objectionable. I think this is an appropriate forum. ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread John Cartwright
On Tue, Nov 15, 2005 at 03:24:29AM +0100, Rembrandt wrote: Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? Hi Vendors are actively encouraged to provide such information to the community. Please don't attempt to judge what others may or may

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Rembrandt
On Mon, 14 Nov 2005 21:29:16 -0500 Byron Sonne [EMAIL PROTECTED] wrote: Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? I don't find those mailings objectionable. I think this is an appropriate forum. I think this list should be

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Ron
I took about 2 minutes out of my life several months ago and created rules in Thunderbird which put all those update messages into a special folder that I ignore. It wasn't incredibly hard to do, and now I'm happy AND I didn't have to complain on the list! Win-win! Rembrandt wrote: Could

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Etaoin Shrdlu
Rembrandt wrote: On Mon, 14 Nov 2005 21:29:16 -0500 Byron Sonne [EMAIL PROTECTED] wrote: Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? Then you need to run off and start your own list. Funny to see you complain about something that is

Re: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues

2005-11-14 Thread Rembrandt
On Tue, 15 Nov 2005 02:32:32 + John Cartwright [EMAIL PROTECTED] wrote: On Tue, Nov 15, 2005 at 03:24:29AM +0100, Rembrandt wrote: Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? Hi Vendors are actively encouraged to provide such

Re: [Full-disclosure] FAO Mark Murtagh from Websense

2005-11-14 Thread pingywon
but the term yester year was used so convicingly ...dont you argee ~pingywon - Original Message - From: Rob Thompson [EMAIL PROTECTED] To: n3td3v [EMAIL PROTECTED] Cc: full-disclosure@lists.grok.org.uk Sent: Monday, November 14, 2005 3:22 PM Subject: Re: [Full-disclosure] FAO Mark

RE: [Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fixsecurity issues

2005-11-14 Thread Aditya Deshmukh
Could you please stop mailing your Bug-Fix-Reports aka Package xyz updated to the Full*-Mailinglist? I don't find those mailings objectionable. I think this is an appropriate forum. These mailings are not objectionable but when they have their own Mail list so why send a copy to full

[Full-disclosure] [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability

2005-11-14 Thread [EMAIL PROTECTED]
[xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability discoverer by [EMAIL PROTECTED] class: design error Threat level: medium Vulnerable anti-virus Engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast

[Full-disclosure] [SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution

2005-11-14 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 896-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze November 15th, 2005