[Full-Disclosure] tripbid secure codes

auto94042_at_hushmail.com
Date: 06/27/03

  • Next message: Leandro Toledo: "[Full-Disclosure] Here ya Go" 
    To: full-disclosure@lists.netsys.com
Date: Thu, 26 Jun 2003 22:25:13 -0700

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    holos,

    i come to tell a very grave thing that make me many a stress . . .

    i post the thing to the vuln dev some days ago and get quite a big respnose.
    not only do i get a heart 2 heat with n1xo reiman about portmon ! but
    some folks want me to look at the code they make, specially a 'hello-
    world.c' progie -> " holo, can you check my hello-world.c for strcpy
    ?? securecode do the trick " <- paraphase the msg, i rm -rf / it since
    it make me anger and stress it !

    i am willing to try the secure code since the grep 'strcpy' is losing
    his thrills so i trick around with :
    [user@localhost]$ ./securecode -s hello-world.c

    File to open: hello-world.c

    Please wait...

    The scan has finished!

    i see that the hello world is safe from strcpy over flow so not a worry
    and then i eat some snack. behold ! some monkey buisness when i came
    back-
    [user@localhost]$ ls
    bala_clava_has_you/ hello-world.c r00t_is_next_pylon/ securecode*
     tmp/ YOU_ARE_SUCH_A_FUCKING_MOMO/
    /* some stuff got snippity , for levity of full discloshure(i read the
    chatter by len!*/

    i do not mkdir these thing !! who can it be clowning around? ?

    i attach the hello_world and zipper it to protect the readers you can
    unzipper it(tar -zxvf) but you may be hack if your not careful and try
    secure code -s to it . maybe some one can tell me what happen or help
    me figure it what next to do ? ? i think this machnie is not a trusted
    one :
    [user@localhost]$ uname -a
    Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686 unknown
    unknown GNU/Linux

    -----BEGIN PGP SIGNATURE-----
    Note: This signature can be verified at https://www.hushtools.com/verify
    Charset: UTF8
    Version: Hush 2.3

    wkYEARECAAYFAj77gD4ACgkQarKSBij8yILBZgCcD6Vh3B8TypME+MFqe5XrjhA46owA
    n2prBzaEsw7Wk4YoOx/VV/Qc2tzm
    =hrqO
    -----END PGP SIGNATURE-----

    Concerned about your privacy? Follow this link to get
    FREE encrypted email: https://www.hushmail.com/?l=2

    Free, ultra-private instant messaging with Hush Messenger
    https://www.hushmail.com/services.php?subloc=messenger&l=434

    Big $$$ to be made with the HushMail Affiliate Program:
    https://www.hushmail.com/about.php?subloc=affiliate&l=427
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Leandro Toledo: "[Full-Disclosure] Here ya Go"
    • Quantcast