RE: [Full-Disclosure] Re: Why is IRC still around?

2004-11-21 Thread Poof
Now... Here is the question... Which is worse... Sitting on IRC and making those comments... Or browsing bash.org to view them. *sigh* ~ IRC is still around because it does one thing. It proves that Einstein was right about stupidity: it is infinite. [frank] can you help me install GTA3?

Re: [in] Re: [Full-Disclosure] IE is just as safe as FireFox

2004-11-21 Thread devis
Todd Towles wrote: Windows doesn't tell you about the Admin account and makes the default user a Admin. That isn't best method as you know. RunAs is great..but that is only good once you create a normal user - and then delete your new default user. Or you log in in Administrator and take away

Re: [Full-Disclosure] Why is IRC still around?

2004-11-21 Thread james edwards
if shooting people is evil, OBVIOUSLY guns are flawed, but only insofar as people are capable of abusing them, willing to abuse them, and effective in their attempts at doing so. so to burn the candle at both ends you have to fight the spread of trojans and virii by fixing the holes they

[Full-Disclosure] Re; Time Expiry Algorithm

2004-11-21 Thread Jacqueline Singh
/me shakes her head at Andrew Farmer. Okay, now it's just ridiculous to suggest that you wouldn't be able to implement a time limitation on something encrypted simply because clocks can be changed. What 'clocks' are talking about -- which are you basing it off of? What if you decided to code

Re: FW: [Full-Disclosure] Shadowcrew Grand Jury Indictment

2004-11-21 Thread devis
Did u just realize what u posted ? xploitable _ at _ gmail.com wants to close hacking sites. Dude, what are you on ? I want some n3td3v wrote: On Wed, 17 Nov 2004 09:26:12 -0600, Todd Towles [EMAIL PROTECTED] wrote: I sent this to n3td3v yesterday. Why look into the news..just go to the

Re: WAS: Re: [Full-Disclosure] IE is just as safe as FireFox: Moved to Education

2004-11-21 Thread devis
Well Done. I did myself start to spend more time explaining what i before thought users couldn't comprehend and i have achieved surprising results. No, they won't suddenly change, but at least it has saved me from re doing the same thing over and over again. They do listen. They do not want

Re: [in] Re: [Full-Disclosure] IE is just as safe as FireFox

2004-11-21 Thread Shoshannah Forbes
joe wrote: Anyway, the base cause is a simple one, Windows is consumer based and *nix wasn't and really still isn't. Look at the market penetrations. *nix tends to have people already knowledgeable with its workings or people who WANT to learn the details using it, Well, Mac OSX is a fully

Re: FW: [Full-Disclosure] Shadowcrew Grand Jury Indictment

2004-11-21 Thread devis
One. Its tolerance. Two. I am glad you are not in charge of this world, or freedom will have ceased. n3td3v wrote: On Wed, 17 Nov 2004 17:53:44 +, n3td3v [EMAIL PROTECTED] wrote: On Wed, 17 Nov 2004 11:41:20 -0600, Todd Towles [EMAIL PROTECTED] wrote: Well, it is given that posting

Re: [Full-Disclosure] Secret Vulns: Places of confusion

2004-11-21 Thread Berend-Jan Wever
Since we're sharing information: Sometimes ago I have examined the products of many software company's to see if it's possible to exploit vulnerabilities remotely. I have found a number of vulnerabilities in a number of software products. Vendors have (or will be) informed of my successful

Re: [Full-Disclosure] Why is IRC still around?

2004-11-21 Thread hutuworm
IRC is a tool/channel to exchange messages, just like mailing lists, web forums, instant messengers and etc. If there's no IRC, hackers or who has the same ideas would also find other channels to found groups, as you joined the Full-Disclosure mailing list. :P On Fri, 19 Nov 2004 12:40:26 -0500,

Re: [Full-Disclosure] Secret Vulns: Places of confusion

2004-11-21 Thread devis
Very well said. And kindly too. Talk or shut up is faster, somehow not as kind. Michael Rutledge wrote: Correct me if I'm wrong (which I know the list members will take me up on that), the FD mailing list is about *discussing* vulnerabilities and revealing important information to the community.

Re: [Full-Disclosure] Re: Why is IRC still around? (n3td3v is a troll)

2004-11-21 Thread n3td3v
On Sun, 21 Nov 2004 05:00:27 + (GMT), Steve R [EMAIL PROTECTED] wrote: First you say that *you* would even close IRC channels and then you state that this idea would never work. Yes, there is a difference between closing IRC channels and banning IRC from the internet, as the previous author

Re: [Full-Disclosure] Secret Vulns: Places of confusion

2004-11-21 Thread Robert Hogan
Credits: d.w., ms, [...] and billy bilano perhaps? -- robert hogan dublin ___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

Re: [Full-Disclosure] University Researchers Challenge Bush Win In Florida

2004-11-21 Thread Stef
On Sat, 20 Nov 2004 19:23:55 -0600, Paul Schmehl [EMAIL PROTECTED] wrote: I disagree. Until the research is credible and vetted, investigating is premature. Many people don't seem to understand, investigating supposed discrepancies in the vote costs millions of dollars. The recount in Ohio

Re: [Full-Disclosure] Windows user privileges

2004-11-21 Thread James Tucker
1. XP would be more suitable to run as a user if the runas service and windows installers were developed to add more complete and easy to use privilege elevation techniques outside of active directory and the default group policy that gets applied. 2. Due to the above, the power users group is

Re: [Full-Disclosure] Secret Vulns: Places of confusion

2004-11-21 Thread Andrew Smith
Ooh! A boast thread, goody! There are many vulnerabilities in many .gov websites, i think the fact that you might get arrested and/or labelled a terrorist deters most people. -- zxy_rbt2 ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-Disclosure] Re; Time Expiry Algorithm

2004-11-21 Thread Raj Mathur
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jax == Jacqueline Singh [EMAIL PROTECTED] writes: jax /me shakes her head at Andrew Farmer. Okay, now it's just jax ridiculous to suggest that you wouldn't be able to implement jax a time limitation on something encrypted simply because

[Full-Disclosure] Hit counters trickery and spamdexing

2004-11-21 Thread Jérôme ATHIAS
Hi, working on a spamdexing paper, as i think it could become one day a serious problem like the spam is nowadays, i've experienced a tried way to generate web traffic and trick the hit counters. As an example you can take a look at: http://www.spreadfirefox.com/?q=affiliates/top250 If you want to

RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox

2004-11-21 Thread joe
LOL, ok you have me on that one. It is something, but very little. :oD Joe -- Pro-Choice Let me choose if I even want a browser loaded thanks! -Original Message- From: Frank Knobbe [mailto:[EMAIL PROTECTED] Sent: Saturday, November 20, 2004 11:54 AM To: joe Cc: [EMAIL PROTECTED]

Re: [Full-Disclosure] Why is IRC still around?

2004-11-21 Thread Geo.
What would IT be like today without IRC (or the like)? Am I narrow minded to say that it would be a much safer place? I can easily show you the flaw in this thinking. Take it to the extreme and ban everything except http and pop/smtp since that's all 95% of the users on the net use anyway. If

RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox

2004-11-21 Thread joe
OSX is an interesting case but at the moment it is still an infant. I look forward to seeing what happens with it as you are correct, it is very consumer oriented. To put it another way, it is a chance for *nix to show off its normal user wings if it has any. People who would get off Windows

Re: [Full-Disclosure] Re: Why is IRC still around?

2004-11-21 Thread ntx0f
Ok, its been a couple days now why are people still responding to this saying the same thing over and over. Do you people even read the emails? You should have noticed everything you keep saying was said already by 20 other people ___ Full-Disclosure -

RE: Re: [Full-Disclosure] IE is just as safe as FireFox: Moved to Education

2004-11-21 Thread joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of RandallM The question above is answered IMHO as yes. Any one who admins or is a PC support person would have to agree. Come'on, if you change their monitor they freak out that there folders are now gone! Absolutely. One bank

RE: [Full-Disclosure] Windows user privileges

2004-11-21 Thread joe
On Fri, Nov 19, 2004 at 04:19:49PM -0600, Paul Schmehl wrote: Windows has several groups. By default users are in the USERS group, *not* the ADMINISTRATORS group. On every XP install that I've seen from every major OEM (Dell, Compaq, Gateway, etc) fast user switching is on by default

RE: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread joe
I seemed to have struck a nerve here Maurizio. I have to say, nothing you have written here has particularly enhanced my concept of the the MCSE program. There are specific MVPs who certainly are cheerleaders but that has nothing to do with them being MVPs nor the general state of the MVP

Re: [Full-Disclosure] Why is IRC still around?

2004-11-21 Thread Darren Reed
This has got to be close to the most stupid thread ever on full-disclosure. I'm not sure if it gets that because the original email was so incredibly naieve or just narrow minded or just a result of very shallow thinking. It's almost dumb enough that you could suggest its premise to some

Re: [Full-Disclosure] Why is IRC still around?

2004-11-21 Thread vord
vord [EMAIL PROTECTED] wrote: if shooting people is evil, OBVIOUSLY guns are flawed, but only insofar as people are capable of abusing them, willing to abuse them, and effective in their attempts at doing so. so to burn the candle at both ends you have to fight the spread of trojans and virii

Re: [Full-Disclosure] Time Expiry Alogorithm??

2004-11-21 Thread Pavel Kankovsky
On Fri, 19 Nov 2004, Anders Langworthy wrote: If a certain deterministic computation (e.g. decryption) can be made in time T, then it can be made in any time T' T. This is true for breaking a cipher by brute force, but it doesn't account for (stop looking at me) somehow incorporating a

Re: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread Georgi Guninski
On Sat, Nov 20, 2004 at 06:06:10PM -0500, Micheal Espinola Jr wrote: Your accusations again joe's expertise and knowledge in this area are completely unsubstantiated. i have not seen any proofs of joe's expertise or knowledge - can you give some proofs? for me joe is just a chatterbox in bed

Re: [Full-Disclosure] University Researchers Challenge Bush Win In Florida

2004-11-21 Thread vord
Al Qaeda is to Iraq what electronic voting is to the bush election win. --vord On Sun, 21 Nov 2004 08:06:13 -0600, Stef [EMAIL PROTECTED] wrote: On Sat, 20 Nov 2004 19:23:55 -0600, Paul Schmehl [EMAIL PROTECTED] wrote: I disagree. Until the research is credible and vetted, investigating is

Re: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread Jason Coombs
Anyone know how many cents of MSFT valuation are a direct result of and attributable to MVPs? I was lucky... I escaped before anyone threatened to make me into an MVP. -Original Message- From: Georgi Guninski [EMAIL PROTECTED] Date: Sun, 21 Nov 2004 22:01:12 To:Micheal Espinola Jr

[Full-Disclosure] Geffen/MCA Records .ASP Community Software, Critical hole

2004-11-21 Thread class 101
Full disclosure by an Anonymous MCA Records isn't told about this vuln,this is a fulldisclosure, highly critical. More infos: http://www.hat-squad.com/weblog/archives/98.html greetz to str0ke and milw0rm.com for the good lookup :)

Re: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread ASB
That sentiment is particularly humorous coming from you... -ASB On Sun, 21 Nov 2004 22:01:12 +0200, Georgi Guninski [EMAIL PROTECTED] wrote: On Sat, Nov 20, 2004 at 06:06:10PM -0500, Micheal Espinola Jr wrote: Your accusations again joe's expertise and knowledge in this area are completely

Re: Re: [Full-Disclosure] IE is just as safe as FireFox: Moved to Education

2004-11-21 Thread ASB
Ah, nostalgia... I have appropriately suppressed many of my memories in this regard. -ASB On Sun, 21 Nov 2004 12:22:24 -0500, joe [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of RandallM The question above is answered IMHO as yes. Any one who

Re: [Full-Disclosure] Re; Time Expiry Algorithm

2004-11-21 Thread Andrew Farmer
On 21 Nov 2004, at 00:14, Jacqueline Singh wrote: Gautam R. Singh [EMAIL PROTECTED] wrote: I was just wondering is there any encrytpion alogortim which expires with time. For example an email message maybe decrypted withing 48 hours of its delivery otherwise it become usless or cant be decrypted

Re: [Full-Disclosure] irc legaility

2004-11-21 Thread Andrew Farmer
On 19 Nov 2004, at 17:22, Simon Lorentsen wrote: In the following scenario; you are a business, is IRC logs of conversations and lists of hosts be help up in a court of law if a client you spoke to refused to pay or hold up the end of a bargain or agreement, and is faxing a document (no hard

RE: [Full-Disclosure] Time Expiry Alogorithm??

2004-11-21 Thread Tiago Halm
Gautam R. Singh [EMAIL PROTECTED] wrote: I was just wondering is there any encrytpion alogortim which expires with time. For example an email message maybe decrypted withing 48 hours of its delivery otherwise it become usless or cant be decrypted with the orignal key Scenario: Lets imagine

RE: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread joe
Georgi, The may sound harsh, but the day I worry about proving my anything to you is the day after I decide to get the MCSE certification. Further, if I ever get to the point about worrying what you think, I will have to hang my 0 and 1 bits on the rack. joe -Original Message-

RE: [Full-Disclosure] WiFi question

2004-11-21 Thread Ake Nordin
(with a nod to Esmond Kane) At 17:50 2004-11-19, Paul Schmehl thusly scribed: --On Thursday, November 18, 2004 09:32:27 AM -0600 Paul Schmehl [EMAIL PROTECTED] wrote: --On Wednesday, November 17, 2004 12:41:44 PM -0500 Lachniet, Mark [EMAIL PROTECTED] wrote: Could also be RF

[Full-Disclosure] gmail

2004-11-21 Thread n3td3v
http://www.securitytracker.com/alerts/2004/Nov/1012289.html ___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

Re: [Full-Disclosure] gmail

2004-11-21 Thread Andrew Farmer
On 21 Nov 2004, at 18:11, n3td3v wrote: http://www.securitytracker.com/alerts/2004/Nov/1012289.html Appears to have been fixed. PGP.sig Description: This is a digitally signed message part

Re: [Full-Disclosure] Time Expiry Alogorithm??

2004-11-21 Thread Andrew Farmer
On 21 Nov 2004, at 17:18, Tiago Halm wrote: Gautam R. Singh [EMAIL PROTECTED] wrote: I was just wondering is there any encrytpion alogortim which expires with time. For example an email message maybe decrypted withing 48 hours of its delivery otherwise it become usless or cant be decrypted with

Re: joe the expert (was Re: [Full-Disclosure] IE is just as safe as FireFox )

2004-11-21 Thread john morris
Hey Guys this is reallly getting on to ur egoes. loyality pays royality at times.after all we all play with what pays. its high time we realise most of the vendor certifications are over rated and dnt guarantee the depth of knowledge. The HR people are a real piece of morons all over if atall