Re: [Full-disclosure] Phun! Search

[n3td3v <n3td3v@xxxxxxxxx>]

Lol, and even with your idea, that would open up a great Yahoo phishing
vector. You mean "anyone" can edit a legitimate Yahoo webpage with the name
"n3td3v" on it and have it cached on Yahoo servers. I believe thats called
"DEFACEMENT" of a corporate webpage. Even with your idea, thats still
headline news. Now wheres Robert Lemos and Joris Evers, or are they too
scared to mention the 'n3td3v' alias on public news sites, yes they are.

On 3/23/06, n3td3v <n3td3v@xxxxxxxxx> wrote:
>
> The document is cached on Yahoo Slurp, you explain that, smart guy ;-)
>
> On 3/23/06, Bernhard Mueller <research@xxxxxxxxxxxxxxx> wrote:
> >
> > Hello,
>
>
>  There's no need at all to cache anything at all.
>
> Sorry to tell you, but there is no vulnerability involved here
>
> --
> Bernhard
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/