Re: [Full-Disclosure] Off-Topic: IKEA ownz Microsoft

2004-04-07 Thread Guido van Rooij
On Mon, Apr 05, 2004 at 09:36:36PM -0400, Adam wrote: SO WTF dose this mean to me or you should IKEA now be a target? I think that Ikea at least dose product tests and sells a stable product with out security flaws or adds **Warnings** about who should use there products and the issues

Re: [Full-Disclosure] Re: Microsoft Security, baby steps ?

2004-03-18 Thread Guido van Rooij
On Wed, Mar 17, 2004 at 12:52:55PM +0100, Daniele Muscetta wrote: Dave Horsfall said: On Wed, 17 Mar 2004, Daniele Muscetta wrote: I know, you roughly have some 26 Megabytes of patches to be installed POST-SP4 and POST IE60SP1 on W2K. Is any other OS any better lately ? OpenBSD.

Re: [Full-Disclosure] another product affected by recent MS IE '@' patch

2004-02-09 Thread Guido van Rooij
On Mon, Feb 09, 2004 at 10:42:18AM +1300, Nick FitzGerald wrote: Section 3.2.2: http_URL = http: // host [ : port ] [ abs_path [ ? query ]] You then have to refer back to RFC 2396 -- coincidentally also section 3.2.2 of that RFC -- for the definitions of the component parts host and

Re: [Full-Disclosure] another product affected by recent MS IE '@' patch

2004-02-09 Thread Guido van Rooij
On Mon, Feb 09, 2004 at 12:59:19PM +0100, Guido van Rooij wrote: http_URL = http: // host [ : port ] [ abs_path [ ? query ]] [...] Following the same reasoning, the HTTP URLs are also deliberately defined to not support port numbers. I fail to believe that this was intentional

Re: [Full-Disclosure] The U.S. State Department needs DCOMbobulator

2003-09-25 Thread Guido van Rooij
On Wed, Sep 24, 2003 at 12:48:01PM -0400, [EMAIL PROTECTED] wrote: On Wed, 24 Sep 2003 11:12:12 EDT, Richard M. Smith [EMAIL PROTECTED] said: For most Windows users, I bet that the only time DCOM ever gets used, if at all, is to run worms like MSBlaster and Welchia. Isn't DCOM needed