Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: WMF round-up, updates and de-mystification
From: InfoSecBOFH <infosecbofh () gmail com>
Date: Thu, 5 Jan 2006 04:07:19 -0800

Listen here Larry... stick to helping bullshit infosec companies use
you to pimp their products.  I have specific examples but have no
reason or motivation to share them with the likes of fuckbag reporters
like you.  You think that because some so called security company isnt
reporting it makes it false?  Perhaps they just dont see it or perhaps
they see the monitary value in just letting sheep like you write about
how good they are in protecting and offering false security.

On 1/3/06, Larry Seltzer <larry () larryseltzer com> wrote:
I have tested and confirmed that this patch only works in specific
scnenarios and does not mitigate the entire issue.  Variations still work.I
have tested and confirmed that this patch only works in specific scnenarios
and does not mitigate the entire issue.  Variations still work.

Oh really? Do you have any more information on this or do you just like to
throw bricks? I have a hard time believing you're right, because it would
mean that there are variations of the attack that don't use its fundamental
mechanism.

All that said, it's clear to me that the rush to adopt this patch is
precipitous. For instance, it's largely unnecessary on Windows 9x, NT, and
2K, unless you rely on a specifically vulnerable app, like Notes.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.ziffdavis.com/seltzer
Contributing Editor, PC Magazine
larryseltzer () ziffdavis com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault