Re: LFI Bug and other Full Disclosure mailing list archives Re: LFI Bug and other From: "Cal Leeming [Simplicity Media Ltd]" <cal.leeming () simplicitymedialtd co uk> Date: Sun, 20 Feb 2011 10:48:57 +0000 Uh, did you even disclose this to the provider first? Not meaning to be funny, but really you should have taken screenshots, informed the abuse team, given them a reasonable amount of time to fix, then disclosed the problem once fixed or once the time had expired (whilst giving them warning 48 hours before hand). My apologies if you have already disclosed this too them, but even if this was the case, you should have explained the story better, showing the disclosure timeframes etc. Is full disclosure a security mailing list, where I can find hacking stuff or a magazine about chat show? your post appropriately. Today's Topics: 1. would apply to this also? I can't answer the question but it would be even more interesting to answer this if you're using a One-Time-Pad (i.e. two files of equal size on to it's which be of
gnome terminal - How do I set fish as the default shell? - Ask Ubuntu -... - StumbleUpon how to survive in vi and emacs some basic vi commands. :set nu show line numbers. :set ic ignore case differences when searching. :set ai set automatic indent. :set sm show matching ( or { with ) or } in insert mode. down-arrow up-arrow move down/up 1 line. right-arrow left-arrow move right/left 1 character column. 0 $ go to 1st/last column of current line. return go down to 1st printable character of next line. nw nb move right/left n words (1 word if n omitted). ng go to line n (end of file if n omitted). ctrl-f ctrl-b page forward/backward 1 screen. ctrl-d ctrl-u page forward/backward half a screen. [[ ]] go to beginning of current/next c function. emacs survival guide. emacs has a vast range of commands, this is just a very brief personal selection of the ones i use most often.
Requests: Python HTTP Module (That Doesn’t Suck) : Python Password Sniffing over a Network (Part 3) Tutorial Description: In this video series, Sickness runs you through different password sniffing techniques. In this third video, Sickness shows how to use Sslstrip and Ettercap in combination to sniff passwords in the network traffic. You can visit Sickness' website for more info. Thanks goes out to Sickness for referring this video to us! Tags: tools , Disclaimer: We are a infosec video aggregator and this video is linked from an external website. Comments: An analysis of EPUB3 (and, uh, a bit more) [I swear when I’m frustrated. That makes this post obscene even by Chris Rock’s standards. Proceed with caution. The IDPF published the current draft of the new EPUB3 spec a few days ago. I’ve read all the sub-specs of EPUB3, and my general feeling about them is one of… “meh”. Assume I agree with everything in the specs I don’t explicitly disagree with here[2]. All hail the mighty iPad I’ll start this section by saying how I have absolutely nothing against JavaScript on the web. But we’re talking about books here. In EPUB3, JS support is now optional. Scripting consequently should be used only when essential to the User experience, as it greatly increases the likelihood that content will not be portable across all Reading Systems and creates barriers to accessibility and content reusability. Sadly, no one will listen to this. This is what will happen: EPUB3 brings "optional" JS support. But I don't blame the IDPF for moving JS support from "should not" to "optional". Again, “HTML5”? No.
Changing Threats To Privacy From TIA to Google (Blackhat 2010) Tutorial This is the video of the presentation titled " Changing Threats To Privacy From TIA to Google " given by Moxie Marlinspike at Blackhat Europe 2010 . We won the war for strong cryptography, anonymous darknets exist in the wild today, and decentralized communication networks have emerged to become reality. These strategies for communicating online were conceived of in anticipation of a dystopian future, but somehow these original efforts have fallen short of delivering us from the most pernicious threats to privacy that we're now facing. Rather than a centralized state-based database of all our communication and movements, modern threats to privacy have become something much more subtle, and perhaps all the more sinister. Thanks go out to Netinfiniy, the creator of Ubuntu PE for referring this video to us. Original Source: None fun ,
Damn Small Linux, The Debian packages Index - Applications - Packages - Download - NotesOff Site - Milestones - FAQ - Wiki - Forums - Blogs - Mini-ITX Store - Income Guide - Donate To make room I had to delete the entire /var/lib/dpkg/ from the iso to make room. It is available as a separate download (dpkg.tar.gz). It's integrity should be high. Below is the list of Debian packages currently in Damn Small Linux. Also, keep in mind that Damn Small is not pure Debian based. there are applications in DSL that are not on this list. Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed |/ Err? A Text Visualization Tool By: Jeff Clark Date: Thu, 22 Mar 2007 The idea of an interactive tool to explore the structure of a text document has always intrigued me. Visually highlighting key terms from a document and the relationships between them might be an effective way to gain new insights. I have been playing around for a while creating such a tool and have decided it's interesting enough to show here. There are quite a few things I don't like about it but I'm going to set it aside for a bit. I don't like to embed java applications directly in my feed so the real application can be found farther down this post - the part that you have to read directly on my site. (image only - the interactive application is farther down) The top left set of connected circles represents a partial view of a graph showing inter-relationships between words. The top right shows a collection of bar graphs giving the distribution of the primary words across the entire document. Give it a try !