Re: Some serious security holes in 'The Bat!'

2003-11-03 Thread Leif Gregory
Hello SyP, Sunday, October 26, 2003, 12:47:23 PM, you wrote: S I'd like if someone dissected these claims... S http://lists.netsys.com/pipermail/full-disclosure/2003-October/012716.html LOL!! No, these are true.. It's funny... ,-- [ Quoted from their message ] | --[Background Information]--

Re: Some serious security holes in 'The Bat!'

2003-10-30 Thread Chris
On Wednesday, October 29, 2003 at 2:04:04 PM, rich gregory wrote in the message Some serious security holes in 'The Bat!' mid:[EMAIL PROTECTED]: ... add logins to TB! so that family members not see each other's ... email Options/Network Administration/Privileges HEY! Wadda ya know! I have

Re[2]: Some serious security holes in 'The Bat!'

2003-10-29 Thread rich gregory
Anyone running in so insecure an environment to make this so called vulnerability an issue ... JN the fact JN remains that third party access ... is conceivable in any JN number of innocent situations, most commonly repair scenarios. MW ... why encrypt plain text messages ... when you send

Re: Some serious security holes in 'The Bat!'

2003-10-29 Thread MAU
Hello rich, RitLabs would do well to add logins to TB! so that family members would not see each other's communications since so many do share PCs email clients. Isn't Options/Network Administration/Privileges what your asking for? -- Best regards, Miguel A. Urech (El Escorial - Spain)

Re[2]: Some serious security holes in 'The Bat!'

2003-10-29 Thread rich gregory
... add logins to TB! so that family members not see each other's ... email M Options/Network Administration/Privileges HEY! Wadda ya know! I have no idea HOW to use it but it looks like that's what 'm talkin' about... Is there any kind of encryption of the email files tied to TB! login

Re: Some serious security holes in 'The Bat!'

2003-10-29 Thread MAU
Hello rich, HEY! Wadda ya know! I have no idea HOW to use it but it looks like that's what 'm talkin' about... Take a look at Working in Multi-User Environment in HELP. Is there any kind of encryption of the email files tied to TB! login or can a savvy user access files on the hard drive

Re: Some serious security holes in 'The Bat!'

2003-10-28 Thread Martin Webster
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Vishal, On 28 October 2003, 22:47 -0500 (28/10/2003 03:47 local time) Vishal [V] in mid:[EMAIL PROTECTED] wrote: V I'm not sure what your point here is..did I miss something in the discussion? Yes, I think so... MW Still more probable than a

Re: : Some serious security holes in 'The Bat!' (slightly OT)

2003-10-28 Thread Simon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Neal, On Mon, 27 Oct 2003 19:36:21 -0900 your time, you said: NL Also their is PINS: Yes, as a user of PINS I can say that it is very good. I've been using it for quite some time now. Apart from the usual features, including password

Re[2]: Some serious security holes in 'The Bat!'

2003-10-28 Thread Barry
Hello Steve, Tuesday, October 28, 2003, 1:51:59 AM, you wrote: ST Hello Joseph, ST Monday, October 27, 2003, 5:06:17 PM, you wrote: JN But now I JN need a place to store them, since there's no mnemonic to keep them in JN mind. But, of course, the place to store them needs to be encrypted JN

Re: Some serious security holes in 'The Bat!'

2003-10-28 Thread Steve Thomas
Hello Barry, Tuesday, October 28, 2003, 2:44:12 AM, you wrote: B I had to add an h to your url.Should read www.splashdata.com Ooops! Thanks for catching that! -- Best regards, Stevemailto:[EMAIL PROTECTED]

Re[2]: Some serious security holes in 'The Bat!'

2003-10-28 Thread Vishal
Hi Martin Tuesday, October 28, 2003, 3:31:13 AM, you wrote: V I'm not sure what your point here is..did I miss something in the discussion? MW Yes, I think so... How? I read the whole thread. Were you talking about the repair scenario? MW Still more probable than a complete stranger sitting

Re: Some serious security holes in 'The Bat!'

2003-10-28 Thread Martin Webster
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Vishal, On 28 October 2003, 09:19 -0500 ( 14:19 local time) Vishal [V] in mid:[EMAIL PROTECTED] wrote: V I'm not sure what your point here is..did I miss something in the discussion? MW Yes, I think so... V How? I read the whole thread. Were

Re[3]: Some serious security holes in 'The Bat!'

2003-10-28 Thread Joseph N.
On Monday, October 27, 2003, Joseph N. wrote in mid:[EMAIL PROTECTED]: I've started using one of those password generators on occasion, because I've about used up all the cute ones I can remember. But now I need a place to store them, since there's no mnemonic to keep them in mind. But, of

Re[2]: Some serious security holes in 'The Bat!'

2003-10-28 Thread Vishal
Hi Martin Tuesday, October 28, 2003, 1:02:56 PM, you wrote: MW Yes. If someone has concerns about passwords being compromised while the MW PC is repaired the simple solution is to change them beforehand. If that MW isn't possible then change them when it's returned. Actually, both would have to

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Vasiliy Efimenko
Hello SyP, On 26 October 2003, at 20:47:23 +0100 you wrote: S I'd like if someone dissected these claims... S http://lists.netsys.com/pipermail/full-disclosure/2003-October/012716.html It is known that The Bat! are not much securely and its passwords and other confidential information may be

Re[2]: Some serious security holes in 'The Bat!'

2003-10-27 Thread Joseph N.
On Sunday, October 26, 2003, Marck D Pearlstone wrote in mid:[EMAIL PROTECTED]: Of course, these are not bugs. They are deliberate design decisions. Anyone running in so insecure an environment to make this so called vulnerability an issue should consider a more expensive solution - like

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Martin Webster
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Joseph, On 27 October 2003, 09:22 -0600 ( 15:22 local time) Joseph N. [JN] in mid:[EMAIL PROTECTED] wrote: Of course, these are not bugs. They are deliberate design decisions. Anyone running in so insecure an environment to make this so

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Melissa Reese
Hi Martin, On Monday, October 27, 2003, at 10:10:17 AM PST, you wrote: There's some merit in having the mail folder under Documents and Settings (XP) and I guess this could be a future install option. Albeit there's nothing stopping you from doing this now. I keep my TB! mail folder in an

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Simon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello SyP, On Sun, 26 Oct 2003 20:47:23 +0100 your time, you said: S I'd like if someone dissected these claims... Personally I've _never_ installed TB! to the Program Files directory or kept my message base in the same place as the TB!

Re[2]: Some serious security holes in 'The Bat!'

2003-10-27 Thread Vasiliy Efimenko
Hello Jurgen, On 27 October 2003, at 10:25:40 +0100 you wrote: JH isn't SecureBat! the Paranoia's choice of email program? I'm not sure that I correct understand what you means but try to ask on this. I think that some people has their some reasons to prevents some information from

Re[2]: Some serious security holes in 'The Bat!'

2003-10-27 Thread Joseph N.
On Monday, October 27, 2003, Martin Webster wrote in mid:[EMAIL PROTECTED]: MW Perhaps plain text editors should encrypt data? Ludicrous! And why MW encrypt plain text messages to your hard disk when you send them MW over the Internet without encryption? E-mail (SMTP/POP) is MW inherently

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Martin Webster
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Joseph, On 27 October 2003, 14:45 -0600 ( 20:45 local time) Joseph N. [JN] in mid:[EMAIL PROTECTED] wrote: MW Perhaps plain text editors should encrypt data? Ludicrous! And why MW encrypt plain text messages to your hard disk when you send

Re[2]: Some serious security holes in 'The Bat!'

2003-10-27 Thread Joseph N.
On Monday, October 27, 2003, Martin Webster wrote in mid:[EMAIL PROTECTED]: MW Surely you would change your password(s) before handing your PC MW to a stranger? And if you can't beforehand, afterwards? Martin, Certainly a good point. I've started using one of those password generators on

Re: Some serious security holes in 'The Bat!'

2003-10-27 Thread Steve Thomas
Hello Joseph, Monday, October 27, 2003, 5:06:17 PM, you wrote: JN But now I JN need a place to store them, since there's no mnemonic to keep them in JN mind. But, of course, the place to store them needs to be encrypted JN and passworded, so I need a password for that :-) I manage a ton

Re:: Some serious security holes in 'The Bat!'

2003-10-27 Thread Perry Nelson
Hi Joseph, Monday, October 27, 2003, 8:06:17 PM, you wrote: JN I've started using one of those password generators on occasion, JN because I've about used up all the cute ones I can remember. But JN now I need a place to store them, since there's no mnemonic to JN keep them in mind. I've used

Re[2]: Some serious security holes in 'The Bat!'

2003-10-27 Thread Vishal
Hi Martin Monday, October 27, 2003, 4:48:28 PM, you wrote: JN They are two separate issues. A misused password can wreak boundless JN havoc for years after the incident. MW You use one password for everything? This issue is completely separate from the one of a misused password. You can have

Re[2]: : Some serious security holes in 'The Bat!'

2003-10-27 Thread Neal Laugman
Monday, October 27, 2003, 6:28:12 PM, Perry wrote: PN Hi Joseph, PN Monday, October 27, 2003, 8:06:17 PM, you wrote: JN I've started using one of those password generators on occasion, JN because I've about used up all the cute ones I can remember. But JN now I need a place to store them, since

Re: Some serious security holes in 'The Bat!'

2003-10-26 Thread Roelof Otten
Hallo SyP, On Sun, 26 Oct 2003 20:47:23 +0100GMT (26-10-03, 20:47 +0200, where I live), you wrote: S I'd like if someone dissected these claims... S http://lists.netsys.com/pipermail/full-disclosure/2003-October/012716.html I suppose they're valid claims. But anybody who's got real security

Re: Some serious security holes in 'The Bat!'

2003-10-26 Thread Marck D Pearlstone
Hi Syp, @26-Oct-2003, 20:47 +0100 (19:47 UK time) SyP [S] in mid:[EMAIL PROTECTED] said to The: S Hello The Bat! users and developers, S I'd like if someone dissected these claims... S http://lists.netsys.com/pipermail/full-disclosure/2003-October/012716.html Simple. The Bat! - general

Some serious security holes in 'The Bat!'

2003-10-26 Thread SyP
Hello The Bat! users and developers, I'd like if someone dissected these claims... http://lists.netsys.com/pipermail/full-disclosure/2003-October/012716.html Cheers, SyP -- Do invisible cats drink evaporated milk? Current version is 2.01.3 |