Full Disclosure mailing list archives

Re: re: eeye temporary patch for current IE vulnerability


From: n3td3v <n3td3v () gmail com>
Date: Tue, 28 Mar 2006 18:14:15 +0100

Unofficial patches overall just help malicious activity, and i'm not even
covering system crashes through bad implementation of third party patches.
Right now i've been monitoring the situation where eEye security have done
the worst thing possible by allowing script kids to download an unofficial
patch. eEye are a disgrace to the industry if they reckon their patch is
going to help the global oprand. To me big name players like SANS, CERT etc
should be publicly slamming eEye and others like it for offering a patch
which will never get past the boundires of the security community and all
its malicious users. I'm calling for the big name players to get behind me
in making the release of third party patches by people like eEye completely
unacceptable in the name of security. Its now a disgrace to me that eEye can
call themselves a security company. Well maybe a security company who offers
tools to aid malicious activity. As for their attempt to help legitimate
users patch their systems, thats a bit of a joke isn't it, since they aren't
hooked upto the millions of internet explorer users to be able to be an
effective solution for legitimate users.
http://groups.google.com/group/n3td3v/browse_thread/thread/a69861a3d768f39f/59589507866a0738#59589507866a0738


On 3/28/06, Jay Libove <libove () felines org> wrote:


Has anyone applied and tested the eeye patch? Verified that it works, and
that it does not do anything else?

-Jay

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: