Until midnight tonight, you can download a free copy of the 1/2008 issue of security magazine hackin9. It’s 84pages, 10.5MB, and requires you to provide an email address they don’t verify.
[via TaoSecurity]
@Anon
Mailinator and Dodgit aren’t required. Just enter any valid-looking e-mail. It won’t be checked.
foo@bar.com worked like a charm.
Posted at 7:06 am on Dec 23rd, 2008 by foobar
i agree
Posted at 7:17 am on Dec 23rd, 2008 by Endorphin
I smell a rat!
Think about it – what better way to take advantage of a vulnerability in a piece of software than offer people freebie downloads for it!?
I reckon they’ve built that PDF in such a way that it buffer-overflows Adobe Reader and compromises your system (even if there’s no ‘payload’).
It gets even more suspect, because a hacking related mag, there for general security research, makes it a freebie download and don’t even check email addys properly!
I used ‘a@b.com’ to get it, haven’t opened it (yet).
Then again it could just be olde fashioned paranoia, either way, it makes for a possible lawsuit against them if they’ve done something stupid like that.
Posted at 11:18 am on Dec 23rd, 2008 by Stu
Don’t know if you’re joking, but it’s called publicity.
Posted at 4:01 pm on Dec 23rd, 2008 by IceBrain
i was thinking the same thing until i used my brain for a second and realized its just publicity (although i did virus scan the file)
Posted at 4:30 pm on Dec 23rd, 2008 by drew
However, the web page does have javascript from 3 other domains that aren’t hackin9, and don’t look familiar (ie adwards, doubleclick, etc)
Posted at 3:54 am on Dec 24th, 2008 by paul
Hack a Day serves up fresh hacks each day, every day from around the web and a special How-To hack each week.
Powered by WordPress
This is what services like dodgit.com and mailinator.com are made for.
Posted at 6:15 am on Dec 23rd, 2008 by Anon