Full Disclosure mailing list archives

Re: morning_wood should stop posting xss


From: "morning_wood" <se_cur_ity () hotmail com>
Date: Fri, 25 Jul 2003 13:38:49 -0700

  you are too narrow minded to even speak, broaden your horizons and
accecpt all posibilities Ron. You are showing your ability to not
comprehend the processes and theroetical possibilities... i feel way  sorry
for you.. go read more books Ron.. im sure you will learn even more crap
that keeps you in your little hole...
quit poping out of it mmmkay..
 you might actually see the horizon...

"the sky is falling!!!" poor Chicken Little

wood

Alright, I'll grant that in these semi restricted environs one might also
make use of such toys, yet, again, these are not open to to all public
consumption applications, and a variation on the 'insider threat'
scenario.  Additionally, if you create false records in a database, and
monitor and log accesses to those records, the rest of the data is
probably still available for exploit and consumption, nothing has really
been stopped or prevented, though it's attempted access might have been
logged.  Honeypots, in their various forms, are placed for tracking abuse
and logging of activities for later analysis and perhaps replay, they are
not
preventive measures, nor are they IDS/IPS kind of systems.  If prevention
is combined within the toy, then you have created something altogether
different.



Thanks,

Ron DuFresne

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: