[Full-disclosure] Brazil's weirdest infosec aspects: "your private key is officially theirs"

2008-10-01 Thread M . B . Jr .
Greetings, Locaweb is the name of the most prominent web hosting organization in Brazil. It was founded in 1998 and hosts more than 260 thousand domains today, according to its main website: http://www.locaweb.com.br/ Unfortunately, not big enough to respect its customers. Locaweb seems to be co

Re: [Full-disclosure] Fwd: [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread kefka
Will you please develop an interesting conspiracy theory, for the gagging of the X-Men Origins: Wolverine trailer. If you're feeling extra creative, go ahead and throw an insult at Gadi Evron, promote Gary McKinnon and relate it all (just barely) to network security (but ignore the full disclosure

Re: [Full-disclosure] Comments on: Senate bill sets guidelines for cybersecurity center

2008-10-01 Thread n3td3v
Someone has lied to someone to get $30 million: This is when an individual intentionally makes lies to fraudulently receive money or goods. www.attorneykennugent.com/library/f.html False pretenses or obtaining property by false pretenses is a common law crime in the United States, where its statu

[Full-disclosure] Comments on: Senate bill sets guidelines for cybersecurity center

2008-10-01 Thread n3td3v
by n3td3v October 1, 2008 4:50 PM PDT $30 million to protect themselves against a false pretence? cyber security doesn't need that much investment, the folks ramping up the idea of a real life die hard 4 are living in cloud cuckoo land. there are no cyber terrorists out there, there is no threat t

Re: [Full-disclosure] Fwd: [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread n3td3v
There is just a power struggle to knock me off the top spot on full-disclosure. The power hungries don't want me around, there is a list of them. 1. joel esler 2. pauldotcom . . . What I talk about is my business, none of yours. I expect another securityfocus article soon to smear me further.

[Full-disclosure] [USN-649-1] OpenSSH vulnerabilities

2008-10-01 Thread Kees Cook
=== Ubuntu Security Notice USN-649-1 October 01, 2008 openssh vulnerabilities CVE-2008-1657, CVE-2008-4109 === A security issue affects the following Ubuntu releases: Ubuntu 6

Re: [Full-disclosure] THC releases video and tool to create fakeePassports

2008-10-01 Thread Pruett, Mike
I about peed my pants laughing at the mere thoughts of this... We could all be like the bad guy from Lethal Weapon 2!! xD -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Carp Sent: Tuesday, September 30, 2008 4:18 PM To: [EMAIL PROTECTED] Cc: full-dis

[Full-disclosure] Fwd: [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread n3td3v
Stop emailing me in private you bunch of stalker, weirdos. -- Forwarded message -- From: kefka <[EMAIL PROTECTED]> Date: Wed, Oct 1, 2008 at 10:12 PM Subject: Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US To: n3td3v <[EMAIL PROTECTED]> Wha

Re: [Full-disclosure] Paul Asadoorian of PaulDotCom Enterprises / Podcast is ridiculous

2008-10-01 Thread n3td3v
On Wed, Oct 1, 2008 at 9:29 PM, <[EMAIL PROTECTED]> wrote: > On Wed, 01 Oct 2008 08:59:16 PDT, Trevow Andrews said: > >> No real research has even come out of Paul and Larry > > And? So? You *do* realize that "kick-ass researcher" doesn't directly imply > "kick-ass teacher", right? Quite often, t

Re: [Full-disclosure] Paul Asadoorian of PaulDotCom Enterprises / Podcast is ridiculous

2008-10-01 Thread Valdis . Kletnieks
On Wed, 01 Oct 2008 08:59:16 PDT, Trevow Andrews said: > No real research has even come out of Paul and Larry And? So? You *do* realize that "kick-ass researcher" doesn't directly imply "kick-ass teacher", right? Quite often, the best researchers make *really bad* teachers, because the same auti

Re: [Full-disclosure] Paul Asadoorian of PaulDotCom Enterprises / Podcast is ridiculous

2008-10-01 Thread n3td3v
On Wed, Oct 1, 2008 at 4:59 PM, Trevow Andrews <[EMAIL PROTECTED]> wrote: > I'm sorry, I just saw his talk at NS2008 on Embedded Device Security and it > is wholely outdated. I can't believe people listen to this man talk. He's > been going on this embedded device security thing for years now and i

[Full-disclosure] Paul Asadoorian of PaulDotCom Enterprises / Podcast is ridiculous

2008-10-01 Thread Trevow Andrews
I'm sorry, I just saw his talk at NS2008 on Embedded Device Security and it is wholely outdated. I can't believe people listen to this man talk. He's been going on this embedded device security thing for years now and it's all years old. His book on hacking WRT54G, which was at SANS, had nothing

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread Eliah Kagan
mcwidget wrote: > This has happened in the UK a few years back - > http://news.bbc.co.uk/1/hi/technology/4721723.stm. A guy was fined £500, > given a 12 months conditional discharge and had his laptop and wireless card > confiscated for repeatedly using someone's unsecured wireless with his > lapt

Re: [Full-disclosure] THC releases video and tool to create fake ePassports

2008-10-01 Thread M . B . Jr .
Moreover, using a CA would not constitute any good solution. Check out Schneier's blog entry on this: http://www.schneier.com/blog/archives/2008/09/how_to_clone_an.html []s On 10/1/08, Ed Carp <[EMAIL PROTECTED]> wrote: > On Tue, Sep 30, 2008 at 11:50 PM, Tonnerre Lombard > <[EMAIL PROTECTED

[Full-disclosure] XSS in Celoxis project management software

2008-10-01 Thread teuquooch1seero
==Background== >From Celoxis.com: > Celoxis is a comprehensive web based project management > tool to improve collaboration and streamline management > of projects, time sheets, expenses and even business > processes specific to your organization ==Problem== The Celoxis project management s

[Full-disclosure] Comments on: Kevin Mitnick detained, released after Colombia trip

2008-10-01 Thread n3td3v
by n3td3v October 1, 2008 6:07 AM PDT its good to know their keeping tabs on this person, it makes me feel safe. good work cops!! http://news.cnet.com/8601-1009_3-10054569.html?communityId=2114&targetCommunityId=2114&blogId=83&tag=mncol;tback#5011632 _

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread n3td3v
you're not getting our gary!!! leave our gary alone!!! he's not coming to your stupid u.s, so GTFO. you're not getting our gary!!! leave our gary alone!!! he's not coming to your stupid u.s, so GTFO. you're not getting our gary!!! leave our gary alone!!! he's not coming to your stupid u.s, so GTFO.

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-10-01 Thread mcwidget
On Wed, Oct 1, 2008 at 4:42 AM, <[EMAIL PROTECTED]> wrote: > On Tue, 30 Sep 2008 23:23:34 EDT, Eliah Kagan said: > > > Has anyone ever been prosecuted for using unsecured wireless for legal > purposes? > > Not to my knowledge - mostly because all the white hats are too damned busy > dealing with

[Full-disclosure] The new Police Central e-crime Unit (PCeU)

2008-10-01 Thread Kyrian
> > The new Police Central e-crime Unit (PCeU) will provide specialist > officer training and co-ordinate cross-force initiatives to crack down > on on-line offences. > > http://community.zdnet.co.uk/blog/0,100567,10009434o-2000331759b,00.htm > > This is great news, i've been fighting for this

[Full-disclosure] Oracle password cracker written in PL/SQL

2008-10-01 Thread Pete Finnigan
Hi Guys, I have just released a free Oracle password cracker written completely in PL/SQL on my website. The reason for doing this is to try and encourage people to "test" passwords for strength in their own databases. I am not seeing any real improvements in password strength generally across the

Re: [Full-disclosure] THC releases video and tool to create fake ePassports

2008-10-01 Thread Ed Carp
On Tue, Sep 30, 2008 at 11:50 PM, Tonnerre Lombard <[EMAIL PROTECTED]> wrote: > Please remind me, which electronic attribute tags an ePassport as > diplomatic if no diplomatic ePassports exist? I'm sorry, but you don't have the appropriate security clearance for me to tell you, nor do you have a