[Full-Disclosure] The 3 D's: Demo for the Dullards and Dunces

["http-equiv@xxxxxxxxxx" <1@xxxxxxxxxxx>]

It's always interesting that the people with the most 
polluted .sig's get everything wrong.

First off sparky, the email addresses are not forged and the 
intro you have kindly provided me is not what I "said" as much 
as you make it appear.  

Now allow me to drill the following into your thick CISSP skull:

Take the following little link:

http://www.malware.com/punk.html

copy and paste it into either of the following:

http://www.securityfocus.com/bid/10308
http://www.securityfocus.com/bid/10023

construct an authoritative looking email from your favorite 
vendor and fire it off to your buddy.  Then with a bit of luck, 
he'll fall for the trap and if you does, you can giggle yourself 
silly.

<!-- 

Yeah, yeah, maybe so, but he's not a pussy who hides his 
identity behind
his forged email address. 

You got something to contribute, contribute.  Otherwise 
STFU 'kay?

=;^)

On or about 2004.07.02 02:52:05 +0000, http-equiv@xxxxxxxxxx 
(1@xxxxxxxxxxx) said:

> "Hey how nice, WindowsUpdate/WellsFargo magically appeared in 
> front of
> me and I didn't even intend to go there .. I was just surfing 
> for porn
> .. Let me hurridly download some stuff from there and give it 
my 
> account
> details"

-- 
Gregory A. Gilliss, CISSP                              E-mail: 
greg@xxxxxxxxxxx
Computer Security                             WWW: 
http://www.gilliss.com/greg/
PGP Key fingerprint 2F 0B 70 AE 5F 8E 71 7A 2D 86 52 BA B7 83 D9 
B4 14 0E 8C A3

-- 
http://www.malware.com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html