Full Disclosure mailing list archives
Re: Apple IOS security issue pre-advisory record
From: Charlie Derr <cderr () simons-rock edu>
Date: Sun, 25 Mar 2012 10:25:34 -0400
On 03/23/2012 07:26 PM, Michal Zalewski wrote:
I find it very unfortunate that 300 supposed security professionals clicked on a hidden link like that without first checking what it was, or if not simply ignoring it like I did!!!So how do you meaningfully "check what it is" without actually requesting the document? And what's the difference between that post and a hidden<img> or <iframe> included on a less obvious website? /mz
YMMV, but I always figured attempting to grab things with links or lynx from a command-line GNU/linux environment ought to be fairly safe, even for files that I'm pretty certain contain viral/trojan code (and to state the obvious, I don't execute anything that I download, I simply use tools to view). And for the record, I didn't get a chance to do that in this case, as I missed the original post. best, ~c
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Apple IOS security issue pre-advisory record, (continued)
- Re: Apple IOS security issue pre-advisory record Dave (Mar 23)
- Re: Apple IOS security issue pre-advisory record Michal Zalewski (Mar 23)
- Re: Apple IOS security issue pre-advisory record Dave (Mar 23)
- Re: Apple IOS security issue pre-advisory record rackow (Mar 23)
- Re: Apple IOS security issue pre-advisory record Valdis . Kletnieks (Mar 23)
- Re: Apple IOS security issue pre-advisory record Dave (Mar 24)
- Re: Apple IOS security issue pre-advisory record Valdis . Kletnieks (Mar 24)
- Re: Apple IOS security issue pre-advisory record Dave (Mar 24)
- Re: Apple IOS security issue pre-advisory record IA64 LOL (Mar 26)
- Re: Apple IOS security issue pre-advisory record Valdis . Kletnieks (Mar 26)
- Re: Apple IOS security issue pre-advisory record Charlie Derr (Mar 26)
- Re: Apple IOS security issue pre-advisory record coderman (Mar 26)
- Re: Apple IOS security issue pre-advisory record john doe (Mar 24)
- Re: Apple IOS security issue pre-advisory record fulldisclosure (Mar 26)
- Re: Apple IOS security issue pre-advisory record Thor (Hammer of God) (Mar 26)
- Re: Apple IOS security issue pre-advisory record Aaron Toponce (Mar 26)