RE: [Full-Disclosure] Gmail Information Disclosure Vulnerability

["Mark Laurence" <m.laurence@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

"You have no respect for the Gmail Team, that's for sure."
Why would he? Respect is earned not given for free.
 
"It's about kiddies posting advisories and exploits for fun and little care
for the vendor(s)."
No the reason they are generally supposed to be posted AFAIK is so that the
secuirty concious user is aware and can take steps to prevent them from
being exploited. Granted reasonable steps should be taken to contact the
vendor, if they dont respond then what can one do?
 
Thanks
Mark
 


   _____  

From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx] On Behalf Of System Outage
Sent: 05 July 2004 14:47
To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] Gmail Information Disclosure Vulnerability


If it's not about respect then what is it about? 
 
 
 
I guess this list isn't about respect...
 
It's about kiddies posting advisories and exploits for fun and little care
for the vendor(s).
 
 
Cheerio
 

amforward@xxxxxxxxxxxx wrote:

System Outage wrote:

|The correct channel to post such "bugs" is the Gmail contact link for "bug 
|reports". 

I have already contacted Gmail about 10 days ago, but I have not received
any 
replies till this moment.

|If you had waited until the Gmail dev team declared gmail a public release,

|you would have gained more respect in the security community scene.

I don't think this is about respect afterall.

Regards,
Ahmed Motaz

------------------------------------------------------
Mailsurf.com your communication portal for SMS,
Email, Fax, E-Cards and more. www.mailsurf.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html




   _____  

Do you Yahoo!?
HYPERLINK
"http://us.rd.yahoo.com/mail_us/taglines/virus/*http://promotions.yahoo.com/
new_mail/static/protection.html"Yahoo! Mail - Helps protect you from nasty
viruses.


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.656 / Virus Database: 421 - Release Date: 09/04/2004



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.656 / Virus Database: 421 - Release Date: 09/04/2004