Re: [FD] SSH host key fingerprint - through HTTPS

2014-09-09 Thread Busindre ™
SSH host key fingerprint - through Terminal ssh-keyscan -p 22 domain.com > /tmp/rsa && ssh-keygen -lf /tmp/rsa Cheers! 2014-09-02 13:40 GMT+02:00 John Leo : > "source code" > It's here: > https://checkssh.com/result/indexdotphp.txt > Extremely short and easy to read. > > "trust the service op

Re: [FD] ntopng 1.2.0 XSS injection using monitored network traffic

2014-09-09 Thread Luca Carettoni
This issue has been fixed in ntopng 1.2.1, together with other security bugs http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ @Steffen I am sure that the ntopng maintainer would appreciate an early heads-up next time. On Wed, 2014-09-03 at 09:32 +0200, Steffen Bauch wrote: > On 25.0

[FD] WordPress Plugin Vulnerability Dump - Part 2

2014-09-09 Thread Voxel@Night
More vulnerabilities in poorly coded plugins for y'all. Ninja Forms v2.77 - Authorization bypass (regular users can delete forms, etc) Contact Form v3.83 - Email header injection WP to Twitter v2.9.3 - Authorization bypass (regular users can tweet to the admin's twitter account) Xhanch - My Twitt

[FD] Public WiFi Pcaps

2014-09-09 Thread Bryan Bickford
Greetings, I am starting some wifi research and had questions about the legality of listening to unencrypted, public wifi data and publishing subsequent research. >From what I understand, the wiretap act prohibits listening to communications that were not configured to be readily accessible to th

Re: [FD] Public WiFi Pcaps

2014-09-09 Thread Eric Rand
If you're interesting in ensuring that you do so with appropriate legality, then your best avenue would be to get the permission of the WAP owner--tell them that you're doing research on wifi, that you wanted to get their permission before doing so, and that you're sensitive to privacy etc. You're

Re: [FD] Public WiFi Pcaps

2014-09-09 Thread uname -a
I guess it depends where you live. In some countries this can be highly illegal. I like your example with the radiostation! But if the feds wanna srew you, they gonna do it this or another way. And yes google lose the fight. No one aware, that any smartphone does such things? DB's full of wifi's a

[FD] NEW VMSA-2014-0008 VMware vSphere product updates to third party libraries

2014-09-09 Thread VMware Security Response Center
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - VMware Security Advisory Advisory ID: VMSA-2014-0008 Synopsis:VMware vSphere product updates to third party libraries Issue date: 2014-09-09 Updated on: