Full Disclosure mailing list archives
Re: [SPAM] Re: To anybody who's offended by my disclosure policy-GET THIS GUYS
From: Jeff Price <jprice () misterunix com>
Date: Sun, 28 Nov 2004 18:48:59 -0600
Hmmm....I tried it on a sandboxed system with Firefox and it made no difference on CPU usage. What is this exploit supposed to do?
Rafel Ivgi, The-Insider wrote:
SkyLined is a great dude. Scerious guy! He is only worthy for RESPECT and no blame. There is no signed law against releasing such information and its funny someone is anyhow talking about this in FULL-DISCLOSURE list, which its entire concept is to disclose full details about vulnerabilities. By the way, for all of FireFox fans....FireFox has many open vulnerabilities which its vendor refuses to fix. Even after notifing and even after 4 month :-)...Moreover, they are just like MS claiming certain bugs are not bugs, talking "in the air" and without checking and under-blowing risk values. They even don't sign their exe's(which is a super minimal protection against man-in-the-middle replacing downloads) so microsoft windows can't say its a valid file from a valid vendor and not a virus. For Example: <a href='http://theinsider.deep-ice.com/ctfmon.exe%00/hehe.exe.|||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||| '>test it</a> This has no effect on I.E...... Will cause LooserFox, ahh sorry, FireFox to ***BURN ALL YOU CPU!!! 100% FOREVER...*** What i am saying is, it is now who codes the software, it is how you do. (if i was not in a job working frame, i would publishing things that will cause you all to say its shit) FireFox team claimed its an old bug.bla bla bla.and has no problem and no security risk...bla bla bla... and didn't fix it after 4 month... Just like MS when they are not even commercial, than what they are? on the way to making money...to be the second size'd market share browser. GO SKYLINED! Rafel Ivgi, The-Insider Security Consultant Malicious Code Research Center (MCRC) Finjan Software LTD E-mail: rivgi () Finjan com --------------------------------- Prevention is the best cure!----- Original Message ----- From: "ph0enix" <ph0enix () ph0enix org>To: "'Gadi Evron'" <ge () linuxbox org> Cc: "'Berend-Jan Wever'" <skylined () edup tudelft nl>; <full-disclosure () lists netsys com> Sent: Saturday, November 27, 2004 5:56 PM Subject: Re: [Full-disclosure] To anybody who's offended by my disclosure policyQuestion is, do you want to be one of the kids playing and ruining lives, or do you want to be one of the people who report problems and do something about them - plus get attention, respect andallthe rest?The guy has talent? Fine by me. I wish him all the luck. This is not about full disclosure. I can live with Full Disclosure. I can't like with kids who think they own the world and want to pwn the world. Gadi.Why do you think he's just a kid who's playing around and runining lives? _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html----------------------------------------------- This message was scanned for malicious content and viruses by Finjan Internet Vital Security 1Box(tm) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: To anybody who's offended by my disclosure policy ph0enix (Nov 27)
- Re: To anybody who's offended by my disclosure policy-GET THIS GUYS Rafel Ivgi, The-Insider (Nov 28)
- Re: To anybody who's offended by my disclosure policy-GET THIS GUYS Gadi Evron (Nov 28)
- Re: [SPAM] Re: To anybody who's offended by my disclosure policy-GET THIS GUYS Jeff Price (Nov 28)
- Re: To anybody who's offended by my disclosure policy-GET THIS GUYS Rafel Ivgi, The-Insider (Nov 28)