Re: [tor-talk] Directory Listing (Apache) Bug Found on torproject.org

2013-06-24 Thread Andrew Lewman
On Mon, 24 Jun 2013 23:57:01 +0500 Ali Hasan Ghauri alihasangha...@hotmail.com wrote: It is Directory Listing (Apache) . An attacker can see the files located in the directory and could potentially access files which disclose sensitive information . This is by design. The smarter attacker

Re: [tor-talk] Directory Listing (Apache) Bug Found on torproject.org

2013-06-24 Thread Gregory Disney
Ha if you want to get a payout for exploit hunting, work for a security firm. Nobody else ever pays for exploit unless they are a 0 days. On Jun 24, 2013 9:25 PM, Andrew Lewman and...@torproject.is wrote: On Mon, 24 Jun 2013 23:57:01 +0500 Ali Hasan Ghauri alihasangha...@hotmail.com wrote: