Re: [Full-disclosure] IBM AIX Security contact?

2006-07-06 Thread Bart . Lansing
No, but try here: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote on 07/06/2006 04:52:44 PM: > Hi to all! > >    Anyone knowns what is the f*ng security contact for IBM AIX? > > -- > Zer gutxi balio duen langileen bizitza > [attachment "signature.asc" del

Re: [Full-disclosure] New IE sploit?

2006-03-24 Thread Bart . Lansing
This will handle the announced sploit...assuming you do snort, courtesy of Bleeding-Snort: http://www.bleedingsnort.com/cgi-bin/viewcvs.cgi/sigs/EXPLOIT/EXPLOIT_IE_Vulnerabilities?view=markup alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"BLEEDING-EDGE WEB CLIENT Internet Explore

Re: [Full-disclosure] complaints about the governemnt spying!

2006-01-04 Thread Bart . Lansing
NUMBER: 1056 AUTHOR: Benjamin Franklin (1706–90) QUOTATION: Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ATTRIBUTION: BENJAMIN FRANKLIN, Pennsylvania Assembly: Reply to the Governor, November 11, 1755.—The Pape

Re: [Full-disclosure] Getting rid of n3td3v

2005-12-16 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear "Yahoo Insider" (Ah n3td3v, we really we all know it's you. But, if you can't find anyone to play with other than yourself, I think most of us understand...): I know you won't mind that I took the liberty of forwarding your post to the real folks

Re: [Full-disclosure] a call for full-disclosure to become a moderated list

2005-12-15 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, et al Given the noise ratio (esp. lately, thanks to a couple of misanthropes with nothing vaild to say) I would agree that some moderation of the list would be in order, if there was a way to find a verifiably non-biased and tolerant inidivdual

Re: [Full-disclosure] Enough's enough...

2005-11-14 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Y'know...I usually take what you have to say with a grain of salt...and maybe a few grains of pain killer...and let it go, but enough already. "If it wasn't for me you wouldn't have an internet to sent your packets on right now"?? There have been a f

Re: WAS: Re: [Full-disclosure] RE: Spamcop automated reporting script...

2005-11-10 Thread Bart Lansing
approach, >so don't feel bad. It is a very good idea, once it's understood. > > There is no real increase in mail from KnujOn, but the decrease >in spam >received has been proven in alpha testing. Your filter, we'll take >it from >there. > >

WAS: Re: [Full-disclosure] RE: Spamcop automated reporting script...

2005-11-10 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob, took a little trip to KnujOn, and have a comment or two... >From the site, with comments parenthetically inserted inline: _ I already have a spam filter/blocker, why do I need KnujOn? Filters and blockers stop spam fr

Re: [Full-disclosure] password vaults-

2005-10-13 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Someone else suggests that this may just be a troll...but I'll answer it anyway: Google is your friend, David. Try googling for "password storage" and weed through the 186,000 hits until you find the product you need. Cheers On Wed, 12 Oct 2005 08:

Re: [Full-disclosure] PAYPAL security, hundred or thausend of buyers under cc fraud

2005-10-11 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'd say Mary hit the nail pretty squarely on the head here. 5 minutes (ok, I lied, 2 minutes) of googling made it pretty clear that being able to breathe and having a credit/debit car were as valid a set of commanilities as any...and I'm not certain a

Re: [Full-disclosure] http://molecularmultimedia.com/ an exploit distribution point

2005-10-04 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Aditya, Symantec AV defines that txt as: Scan type: Auto-Protect Scan Event: Threat Found! Threat: Trojan.Phel File: E:\TEMP\notes53B1E5\molecularmultimedia.com.txt Webamster and others @molecularmultimedia.com being cc'd on this mail On Mon, 0

RE: [Full-disclosure] Different Claims by ZoneLabs on the "BypassingPersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue

2005-10-04 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Todd, et al, When was the last time you saw an announcement of a vulnerability that affected windows 3.11? If you are 2 or 3 full revs behind the current release version of pretty much any software, you get what you get. On Mon, 03 Oct 2005 17:11:28

Re: [Full-disclosure] Third issue of the Zone-H Comics

2005-09-27 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 n3td3v, man, really, lay off the caffeine. Of course newspapers solicit for videos and photos of newsworthy events. Other comments regarding your slightly maniacal rant: SUICIDE bombers...typically DEAD. Tough to solicit videos from them, and rathe

[Full-disclosure] Stop the Trojan War!

2005-08-11 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sheesh, it's not rocket science, and some of you seem to think you are historical linguists instead of security professionals. Trojan Horse = Delivery Method Greeks = Malacious Payload The Trojen Horse could have contained plague-infected rats and s

Re: [Full-disclosure] Defeating Citi-Bank Virtual Keyboard Protection

2005-08-08 Thread Bart Lansing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 06 Aug 2005 13:40:40 -0700 root <[EMAIL PROTECTED]> wrote: >Aditya Deshmukh wrote: > >>The only most secure protection is a one time password with a >challenge / >>response scheme. Most of the banks in europe already do this. >> >>They give o

Re: [Full-disclosure] Cisco IOS Shellcode Presentation

2005-08-01 Thread Bart . Lansing
[EMAIL PROTECTED] wrote on 07/29/2005 09:28:31 PM: > [EMAIL PROTECTED] wrote: > > On Fri, 29 Jul 2005 15:02:51 -1000, Jason Coombs said: > >>redesign, fundamentally, the turing machine so that before each > >>operation is performed a verification step is employed to ensure that > > > > Ahem. N

Re: [Full-disclosure] Security benefits of spliting services betweentwo ISP providers

2005-05-20 Thread Bart . Lansing
Two providers, absolutely...but that's only part of the story. If you want to approach the level of business continuity (because this is not at all about security...this about redundancy and availability) you also need to ensure dual entry points into your building from seperate trunks (comin