From: Burak DAYIOGLU (burak.dayioglu@pro-g.com.tr)
Date: Mon 29 Mar 2004 - 01:03:28 EST
Herkese oneririm, cok eglenceli.
selamlar.
-- Burak DAYIOGLU Danisman, Pro-G Bilisim Guvenligi ve Arastirma Ltd. http://www.pro-g.com.tr info@pro-g.com.tr Tel: +90 312 2101494 Faks: +90 312 2101493 -- Attached file included as plaintext by Ecartis -- -- File: [Full-Disclosure] Microsoft's own DOCs Return-Path: <full-disclosure-admin@lists.netsys.com> Received: from netsys.com (NETSYS.COM [199.201.233.10]) by knidos.general.services.metu.edu.tr (8.12.11/8.12.11) with ESMTP id i2RHTIvh594228 for <dayioglu@metu.edu.tr>; Sat, 27 Mar 2004 19:29:20 +0200 Received: from NETSYS.COM (localhost [127.0.0.1]) by netsys.com (8.11.6p2-2003-09-16/8.11.6) with ESMTP id i2RGNBn03690; Sat, 27 Mar 2004 11:23:11 -0500 (EST) Received: from ghettot.org (coredump.cx [217.8.32.51]) by netsys.com (8.11.6p2-2003-09-16/8.11.6) with ESMTP id i2RGLs503362 for <full-disclosure@netsys.com>; Sat, 27 Mar 2004 11:21:55 -0500 (EST) Received: by ghettot.org (Postfix, from userid 1005) id A46D42DF4A; Sat, 27 Mar 2004 17:27:01 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by ghettot.org (Postfix) with ESMTP id 8DB9B2DF49 for <full-disclosure@netsys.com>; Sat, 27 Mar 2004 17:27:01 +0100 (CET) From: Michal Zalewski <lcamtuf@ghettot.org> X-X-Sender: lcamtuf@dekadens.coredump.cx To: full-disclosure@netsys.com Message-ID: <20040327172127.Y68418@dekadens.coredump.cx> X-Nmymbofr: Nir Orb Buk MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [Full-Disclosure] Microsoft's own DOCs Sender: full-disclosure-admin@lists.netsys.com Errors-To: full-disclosure-admin@lists.netsys.com X-BeenThere: full-disclosure@lists.netsys.com X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: <http://lists.netsys.com/mailman/listinfo/full-disclosure>, <mailto:full-disclosure-request@lists.netsys.com?subject=unsubscribe> List-Id: Discussion of security issues <full-disclosure.lists.netsys.com> List-Post: <mailto:full-disclosure@lists.netsys.com> List-Help: <mailto:full-disclosure-request@lists.netsys.com?subject=help> List-Subscribe: <http://lists.netsys.com/mailman/listinfo/full-disclosure>, <mailto:full-disclosure-request@lists.netsys.com?subject=subscribe> List-Archive: <http://lists.netsys.com/pipermail/full-disclosure/> Date: Sat, 27 Mar 2004 17:27:01 +0100 (CET) X-Bogosity-Metu: No, tests=bogofilter, spamicity=0.000000, version=0.15.7 I've put up a quick and fairly entertaining (or so I hope) analysis of some of the artifacts of "change tracking" mechanism you can find in Microsoft's own .DOC publications. http://lcamtuf.coredump.cx/strikeout/ Just to serve as a warning - anyone willing to code an automated change tracking stripper for mail gateways and web publishing services? Could be a business. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html