Next Page >>
Virginia Tech
Sincerely,
Aras "Russ" Memisyazici
Systems Administrator
Virginia Tech
________________________________
From: John Bailey [mailto:rekkanoryo@rekkanoryo.org]
Sent: Thu 9/18/2008 5:44 PM
To: Memisyazici, Aras
>>> arasm {at) vt ^dot^ edu --> I set my return addy to /dev/null
>>> for... well
>>> you know why!
>>>
>>> Systems Administrator
>>> Virginia Tech
>>>
>>> -----Original Message-----
>>> From: Larry Seltzer [mailto:larry@larryseltzer.com] Sent: Wednesday,
>>> September 16, 2009 5:03 PM
>>> To: Susan Bradley; Thor (Hammer of God)
> Aras "Russ" Memisyazici
> arasm {at) vt ^dot^ edu --> I set my return addy to /dev/null for... well
> you know why!
>
> Systems Administrator
> Virginia Tech
>
> -----Original Message-----
> From: Larry Seltzer [mailto:larry@larryseltzer.com]
> Sent: Wednesday, September 16, 2009 5:03 PM
> To: Susan Bradley; Thor (Hammer of God)
> Aras "Russ" Memisyazici
> arasm {at) vt ^dot^ edu --> I set my return addy to /dev/null for... well
> you know why!
>
> Systems Administrator
> Virginia Tech
>
> -----Original Message-----
> From: Larry Seltzer [mailto:larry@larryseltzer.com]
> Sent: Wednesday, September 16, 2009 5:03 PM
> To: Susan Bradley; Thor (Hammer of God)
Aras "Russ" Memisyazici
arasm {at) vt ^dot^ edu --> I set my return addy to /dev/null for... well
you know why!
Systems Administrator
Virginia Tech
-----Original Message-----
From: Larry Seltzer [mailto:larry@larryseltzer.com]
Sent: Wednesday, September 16, 2009 5:03 PM
To: Susan Bradley; Thor (Hammer of God)
>
> Just a thought,
> Aras 'Russ' Memisyazici
> Systems Administrator
>
> Virginia Tech
Wow, security through obscurity. That's a good practice alright. So
you propose that I and my fellow Pidgin developers implement security
through obscurity, thus giving our users a false sense of security? No
chance. Note also that we store passwords on-disk without any form of
> >>>>>
> >>>>> No harm in that is there?
> >>>>>
> >>>>> Aras "Russ" Memisyazici
> >>>>> Systems Administrator
> >>>>> Virginia Tech
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>> --
Just a thought,
Aras 'Russ' Memisyazici
Systems Administrator
Virginia Tech
-----Original Message-----
From: Siim Pder <siim@p6drad-teel.net>
Sent: Thursday, September 18, 2008 12:58 PM
To: bugtraq@securityfocus.com <bugtraq@securityfocus.com>
Subject: Re: Pidgin IM Client Password Disclosure Vulnerability.
>>>>>
>>>>> No harm in that is there?
>>>>>
>>>>> Aras "Russ" Memisyazici
>>>>> Systems Administrator
>>>>> Virginia Tech
>>>>>
>>>>>
>>>>>
>>>>>
>>> --
>>>>>
>>>>> No harm in that is there?
>>>>>
>>>>> Aras "Russ" Memisyazici
>>>>> Systems Administrator
>>>>> Virginia Tech
>>>>>
>>>>>
>>>>>
>>>>>
>>>>
>
>
> Sincerely,
> Aras "Russ" Memisyazici
> IT Specialist II
> Virginia Tech -- OIS
>
>
> -----Original Message-----
> From: "Ofer Shezaf" <ofers@Breach.com>
> To: "Bugtraq" <bugtraq@securityfocus.com>
--->
---> Aras "Russ" Memisyazici
---> IT/R&D/Security Specialist
--->
---> Outreach Information Services
---> Virginia Tech
--->
---> -----Original Message-----
---> From: Denis [mailto:sp23@internode.on.net]
---> Sent: Tuesday, January 15, 2008 12:16 AM
---> To: crazy frog crazy frog
>>>>>>>
>>>>>>> No harm in that is there?
>>>>>>>
>>>>>>> Aras "Russ" Memisyazici
>>>>>>> Systems Administrator
>>>>>>> Virginia Tech
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>
> No harm in that is there?
>
> Aras "Russ" Memisyazici
> Systems Administrator
> Virginia Tech
>
>
This shell upload hack assumes the mySQL account running the E-Z-Blog has file create capabilities. If an admin does NOT tweak the running account and allows for this privilege then they are pretty much asking for it, wouldn't you agree? ;)
Aras 'Russ' Memisyazici
Systems Administrator
Office of Research
Virginia Tech
-----Original Message-----
From: y3nh4ck3r@gmail.com <y3nh4ck3r@gmail.com>
Sent: Monday, April 27, 2009 12:42 PM
> > >>
> > >> No harm in that is there?
> > >>
> > >> Aras "Russ" Memisyazici
> > >> Systems Administrator
> > >> Virginia Tech
> > >>
> > >>
> > >>
> >
> > --
>>
>> No harm in that is there?
>>
>> Aras "Russ" Memisyazici
>> Systems Administrator
>> Virginia Tech
>>
>>
>>
--
>>>
>>> No harm in that is there?
>>>
>>> Aras "Russ" Memisyazici
>>> Systems Administrator
>>> Virginia Tech
>>>
>>>
>>>
>>
>>
> >>
> >> No harm in that is there?
> >>
> >> Aras "Russ" Memisyazici
> >> Systems Administrator
> >> Virginia Tech
> >>
> >>
> >>
>
> --
Aras "Russ" Memisyazici
IT Specialist II
Outreach Information Services
Virginia Tech
Blacksburg, VA, USA
> Sincerely,
> Aras Memisyazici
> IT/Security/Dev. Specialist
>
> Outreach Information Services
> Virginia Tech
>
> -----Original Message-----
> From: pdp (architect) [mailto:pdp.gnucitizen@googlemail.com]
> Sent: Tuesday, September 18, 2007 11:58 AM
> To: bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk
> > >>
> > >> No harm in that is there?
> > >>
> > >> Aras "Russ" Memisyazici
> > >> Systems Administrator
> > >> Virginia Tech
> > >>
> > >>
> > >>
> >
> > --
ADMINISTER it!
|
| Aras "Russ" Memisyazici
| Systems Administrator
| Office of Vice President for Research
| Virginia Tech
|
| -----Original Message-----
| From: Team SHATTER [mailto:shatter@appsecinc.com]
| Sent: Monday, August 04, 2008 12:42 PM
| To: bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk
Sincerely,
Aras "Russ" Memisyazici
IT Specialist II
Virginia Tech -- OIS
-----Original Message-----
From: "Ofer Shezaf" <ofers@Breach.com>
To: "Bugtraq" <bugtraq@securityfocus.com>
Aras "Russ" Memisyazici
IT/R&D/Security Specialist
Outreach Information Services
Virginia Tech
-----Original Message-----
From: Denis [mailto:sp23@internode.on.net]
Sent: Tuesday, January 15, 2008 12:16 AM
To: crazy frog crazy frog
So... I would predict a good chunk of uninfomed users to get hit by this easily!
Aras "Russ" Memisyazici
IT Specialist II
Virginia Tech
Outreach Information Services
-----Original Message-----
From: "Matthew Leeds" <mleeds@theleeds.net>
To: "bugtraq@securityfocus.com" <bugtraq@securityfocus.com>
Enjoy,
Aras Memisyazici
Systems Administrator
Virginia Tech
P.S. Thx Martian for writing such a plugin :D
Sincerely,
Aras "Russ" Memisyazici
IT Specialist II
Virginia Tech -- OIS
-----Original Message-----
From: "Ofer Shezaf" <ofers@Breach.com>
To: "Bugtraq" <bugtraq@securityfocus.com>
No harm in that is there?
Aras "Russ" Memisyazici
Systems Administrator
Virginia Tech
Sincerely,
Aras Memisyazici
IT/Security/Dev. Specialist
Outreach Information Services
Virginia Tech
-----Original Message-----
From: pdp (architect) [mailto:pdp.gnucitizen@googlemail.com]
Sent: Tuesday, September 18, 2007 11:58 AM
To: bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk
Next Page>>
|
