Re: Somedude responds to criticism
Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> Mon, 19 Jan 2009 21:21:51 +0000
| Newsgroups | gmane.network.freenet.technical |
|---|---|
| Message-ID | <[email protected]> |
On Monday 19 January 2009 19:42, Florent Daignière wrote: > * Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> [2009-01-19 13:02:31]: > > > There were at least: > > - A lack of validation on the captchas page which enabled collecting users IP > > addresses. This involved putting newlines into the headers in order to send > > extra headers and in particular redirects, and was actively exploited by > > nextgens to collect IP addresses. > > Unless you can prove it that's defamation ;) Then I retract it ... but I'm fairly sure this bug is exploitable, that's the point. :) _______________________________________________ Tech mailing list [email protected] http://emu.freenetproject.org/cgi-bin/mailman/listinfo/tech
signature.asc
(application/pgp-signature, 827 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQIVAwUASXTu8HsvjZi+xPTDAQL5axAAmbM/zAt2rixyUBBGrAP8yvyibxEn+A+0 2mD7uUx0O17FrfYX9HiX0dgzB66OSAeXzvIpUYrhK5etWRUQT30enVH3NgxGR5AI 2CkfAXRApsfbsyvo/kZDx3mxtcVYS7UgD67dIM++kV41o7C7Zl64+Wia2HHKI18/ e0izz0AJsPheR/LjSEy0kPKyCRgL0bQScdax/q67uBl5KqNVOBgC5zQt00PX38WB UJ0CH4DIw4q1TBmGghA4Jmc67jAIq33VdSISfBD9TRSLaCa3zSIj8b2XNEdxfNPf W9lJTcXOD+3qBayjMKXzf2dRsSC7QMubHGWBkd02WZmqDwg1mQCRs7DXznqz+l8d ijaMujv3SPdGJizmh+hBO2c7KiCPGalePsTVWivH2FL1FZ3EXNgS3x6WvB7wwJj6 1Nw0fs5c9mzKzhfO4YKkqvwGihXQjF5dFjIZEXePm/vHPqE/BCO4ezFXfAtTUXEA RbPcldnZ22XFlG++U1XchnMpqGQ7m41A54QrK2Xv2vkZVAGpqexvQk82p2Ix/D/P xnJD7+0O2aAItdEhU0uCN3Ox4emhbqVNnpJcTxjvuf0yiOJgvAKQOWfttxFjFI2W 1vX+MGjE+7NFqusZ86n4TZW73MgL1+Dc6SQhQNoAVmn15nrS+46K2UjKxUMW745f DHPBNhXuuZk= =TbDH -----END PGP SIGNATURE-----