Re: [Full-disclosure] printer attacks?

-%20Slides.m4v --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] can someone please try and explain to me....

of the Internet, getting to say cyberwar is just too tempting for lots of people to resist. --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] CoffeeWars X: Call for Beans

beans necessary Can you believe that this will be the tenth CoffeeWar? Every year has brought adventure. The high-tech toaster. The year of only two entries. Shrdlu and Foofus getting stranded in an Albertson's parking lot after hours

[Full-disclosure] Coffee Wars 9 : Call for Beans

? Will you join the previous eight winners in glory? Only one way to find out, friend. So mobilize your beans and enter. --Foofus. * If you have actually driven a Ford Granada, well, you know what we mean. ___ Full-Disclosure - We believe in it. Charter

Re: [Full-disclosure] Fwd: Citrix Brute Force Tool

On Wed, Nov 14, 2007 at 12:40:11PM +0100, James Matthews wrote: Try using hydra! Then, after trying for a while, realize that it doesn't support Citrix! --Foofus. On Nov 14, 2007 12:09 PM, Lohan Spies [EMAIL PROTECTED] wrote: Hi there, I am looking for a Citrix brute force

Re: [Full-disclosure] tools: patch for thc hydra v5.4

/~jmk/medusa/medusa.html It has several advantages over hydra (superior NTLM functionality being perhaps the most useful), but does not yet duplicate every single one of hydra's modules. If there's a hydra feature missing that you'd like to see, be sure and let the author (jmk at foofus dot net

[Full-disclosure] CoffeeWars 8

to the amount of coffee that the judges can consume, so serious entrants may wish to ensure their beans a slot by pre-registering. Just send e-mail to foofus at foofus dot net, and we'll set aside an entry form for you. Good luck, and see you at the con. --Foofus

Re: [Full-disclosure] NSA's surveillance project:True or crap

of the actual agencies involved say anything. Check this out, for example: http://www.amazon.com/Chatter-Dispatches-Secret-Global-Eavesdropping/dp/1400060346/ Decent book, with a fairly evenhanded approach. --Foofus. ___ Full-Disclosure - We believe

[Full-disclosure] [off topic] CoffeeWars VII: Call For Beans

there, but you're encouraged to stick around and sample a cup of something good, as it becomes available. You can also send an e-mail to me (foofus at foofus d0t net) if you plan to enter, and I'll be sure to have an entry form set aside for you. Some people have already done this. Anyway, if all

Re: [Full-disclosure] Patterns and Security Measurement

some work along these lines, involving just servers and workstations. My materials from ToorCon might contain some items of interest for you: http://www.toorcon.org/2005/slides/foofus-howbigisthatfootinthedoor.pdf Any recommendation of academic or industrial solutions would be welcome. In my

Re: [Full-disclosure] infosecbofh

-disclosure/2005-April/033377.html http://www.nlm.nih.gov/medlineplus/ency/images/ency/fullsize/9942.jpg --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http

Re: [Full-disclosure] Most common keystroke loggers?

the Halting Problem? --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Most common keystroke loggers?

of any sort) has been proven to be undecidable in the strong way that the Halting Problem has. I may be wrong, though, which is why I ask. --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html

Re: [Full-disclosure] Most common keystroke loggers?

that actions taken in the user's name are authentic representations of the user's intentions (i.e., a way of ensuring that requests made on the user's behalf are legitimate) if the user's system is compromised. Is that part of the challenge? --Foofus

Re: [Full-disclosure] Most common keystroke loggers?

to a smart-card (so all the compromised system can see is encrypted data it can't get the key for) can help yere. You sure? :) --Foofus. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted

Re: [Full-disclosure] Interesting idea for a covert channel or I just didn't research enough?

, and somebody sooner or later will probably figure out a way to do something interesting with it. I look forward, at the very least, to the inevitable presentation on video over covert syslog by Dan Kaminsky. :) --Foofus. ___ Full-Disclosure - We believe

Re: [Full-disclosure] Re: pnp worm unknown variant - post infectionactions

so called experts will not. If a non-certified person presents a reasonable conclusion about a matter of computer forensics, what sense would it make to reject it out of hand? --Foofus. ___ Full-Disclosure - We believe in it. Charter: http

[Full-disclosure] CoffeeWars VI: Call for Beans

, then others can have some. Maybe. Likewise, the field of battle is often crowded. If you are planning to enter, it is advisable to let us know (for example, drop an e mail to foofus at foofus dot net) in advance so that we reserve a pot for you. Finally, a note on punctuality: we strive to accept