[Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

0x80 at hush.ai 0x80 at hush.ai
Fri Apr 28 08:57:47 BST 2006


Blah blah blah... shut the fuck up whiner.

Mr. C.I.S.S.P... Mr. M.C.S.E

What the fuck do you know about working with vendors and 
vulnerabilities?  Jack and shit.. that is what you know.

You want a service.. then fuckin pay for it newb.

On Wed, 26 Apr 2006 08:06:09 -0700 Tim Bilbro 
<trbilbro at verizon.net> wrote:
>You do a disservice to all IT shops by announcing these 
>vulnerabilities
>before contacting the vendor. I am sure it would not generate as 
>much
>web traffic to your site, but it is only fair and right to allow 
>at
>least some amount of time for the vendor to respond. If you think 
>you
>are helping, you are wrong. Would you go around town checking 
>which
>stores are unlocked at night and then publish the list in the news
>before letting the shop owners know? That's pretty much what you 
>are
>doing. It's just not helping. There is no proof that it is either.
>
>Tim Bilbro
>Information Security Specialist
>CISSP, MCSE
>trbilbro at verizon.net
>web: www.bloglines.com/blog/Bilbro
>RSS: www.bloglines.com/blog/Bilbro/rss



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485




Full-Disclosure is hosted and sponsored by Secunia.