RE: Re: Google is vulnerable from XSS attack

["Joseph Pierini" <jpierini () hotmail com>]

I know I'm gonna kick myself in the morning for this but...

N3td3v, 

http://dictionary.reference.com/search?q=Sarcasm

Oh, I also hold an MCP and I am the winner of the coveted LSMFT - 3 years
running!

-j 

-----Original Message-----
From: n3td3v [mailto:xploitable () gmail com] 
Sent: Wednesday, December 07, 2005 9:56 AM
To: jpierini; full-disclosure () lists grok org uk
Subject: Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

On 12/7/05, jpierini <jpierini () hotmail com> wrote:

"I'm just a CISSP, and as discussed numerous times I'm without the elite mad
skills of a hacker (XSS wasn't even on our test!)"

You're not a professional then in my eyes and don't have a right to be
even in this thread let alone go around wtih your CISSP title.

"Why won't the hacking community give the
vendors a reasonable amount of time to cover their asses"

Because Google took less than 48-hours to fix a less severe XSS flaw
the last time: http://www.zone-h.org/en/news/read/id=4439/

As a owner of a Google Group, I would personally like this patched for
the security of my group and that of my personal computer and web
browser.

"the damage is done"

Not yet, the longer Google leave it the more likely an attack on all
groups could be carried out.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/