Re: [Full-disclosure] Orkut exploit

[Cardoso <cardosolistas@xxxxxxxxxxxxxxxxxx>]

Don't waste your time.

The scammer sends the same crap to a brazilion mails, counting that a
percentage will have Orkut accounts. 

I reverse-hacked one of those low-lifes once, and there were a few
files, each with +400.000 emails. A Perl script running, reading and
sending mail after mail, that's all. 




On Wed, 28 Jun 2006 16:19:36 -0400
"Ademar Gonzalez" <ademar.gonzalez@xxxxxxxxx> wrote:

AG> On 6/28/06, nocfed <nocfed@xxxxxxxxx> wrote:
AG> 
AG> >
AG> > In what way is this an "Orkut exploit" as the subject of the mail
AG> > describes?  This is more of an "Idiot exploit"...
AG> >
AG> 
AG> yeah, i agree is an idiot exploit,  English is not my first language
AG> and that was the best subject i could come up with.
AG> 
AG> but don't be fooled, they may be using something inside orkut to
AG> collect the email addresses. it may be a lame xss, i will let that for
AG> whoever wants to figure it out.
AG> 
AG> cheers
AG> 
AG> ademar
AG> 
AG> _______________________________________________
AG> Full-Disclosure - We believe in it.
AG> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
AG> Hosted and sponsored by Secunia - http://secunia.com/
AG> 

year(now) + 1 será o ano do linux!
Cardoso <cardoso@xxxxxxxxx> - SkypeIn: (11) 3711-2466 / (41) 3941-5299
vida digital: http://www.contraditorium.com site pessoal e blog: 
http://www.carloscardoso.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/