|
|
[ Message Precedent sur la mailing][ Message Suivant sur la mailing][ Precedent dans le fil][ Prochain dans le fil][ Index par Date][ Index par fil]
Re: [Full-disclosure] nVidia.com [Url Redirection flaw]
Wrong on that one .. Ruben. But i agree on the Anders Klixbull one :) 2009/3/26 Rubén Camarero <rjcamarero@xxxxxxxxx>
I shall count the seconds it take for Mr. Mac.User to switch internet pages to go to Mr. Lincoln's gmail and write a reply to himself: 1, 2, finish it for me!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
My favourite sort of internet personality is one that trolls
grammar nazis in their well structured insults against the
intelligence of others. Bravo my friend.
On Thu, 26 Mar 2009 01:09:38 -0400 Rubén Camarero
< rjcamarero@xxxxxxxxx> wrote:
>_You_ are two dim to imagine that this issue is more like a bug
>than a
>vulnerability. If _you_ did try to imagine it, your head would
>probably
>explode and xssme would ooze out.
>
>On Thu, Mar 26, 2009 at 12:42 AM, Nick FitzGerald
>< nick@xxxxxxxxxxxxxxxxxxx>wrote:
>
>> Rubén Camarero wrote:
>>
>> > What great references. Owasp isn't the king of vulnerability
>information,
>> of
>> > course a website named XSSed is going to count this as super
>serious, and
>> > while I respect Insecure.. these days, people have exploited
>web bugs to
>> > their max (and I'm waiting for more), but they aren't directly
>serious.
>> > DIRECTLY is the key word.
>>
>> No, but just because this kind of vulnerability is "only"
>indirectly
>> serious dosen't mean that they aren't serious.
>>
>> Just because _you_ are too dim to imagine a way that someone can
>profit
>> significantly from exploiting this does not mean that there are
>not such
>> methods, NOR that use of such exploits won't "damage" nVidia.
>>
>> Whether nVidia (and others affected by so many similar
>vulnerabilities)
>> will see this and decide to take action is what really matters.
>In this
>> regard, I certainly hope that you do not work for, or consult
>with, or
>> otherwise represent the view of nVidia on this issue.
>>
>>
>> Regards,
>>
>> Nick FitzGerald
>>
>>
>>
>--
>Rubén Camarero
>CCNA, CISSP
wpwEAQMCAAYFAknLrq4ACgkQfuF4tUz/X+JKzAP/ViirowPihAisi1DFEi4W6jOn/CwQ
sAU9c5riwPvj5DrYfZYblg2BIduxBYweSAwrcA8TnJNBaBKOIv1weO2MclqEp11xq+Z3
UfR2UpkldfMWzHpfGkxhwcz2xcy5T9PN/79IGnGk3xiG8zW2eBo88yNrhiE7x2e9PFjI
BOCaN9A=
=gYB5
-----END PGP SIGNATURE-----
--
Free information on the best Web Hosting. Click Now!
http://tagline.hushmail.com/fc/BLSrjkqe38U7zLZKJoIcSfnZcCPMg2m3CMMZbrY9em4IiOArRQ7ukNi4nK4/
--
Rubén Camarero
CCNA, CISSP
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Full-Disclosure - We believe in it.
Charter: link://[click]
Hosted and sponsored by Secunia - link://[click]
Archives de la liste de diffusion Secunia
Archives de la liste de diffusion Full Disclosure
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
