lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Tue, 10 Feb 2004 16:28:31 -0800 (PST) From: "John D. Hardin" <jhardin@...sec.org> To: der Mouse <mouse@...ents.Montreal.QC.CA> Cc: Darren Reed <avalon@...igula.anu.edu.au>, bugtraq@...urityfocus.com Subject: Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer On Tue, 10 Feb 2004, der Mouse wrote: > Depends. Does it include the tools necessary to sign my own code? > > If so, what's to stop a malware creator from using those same tools to > sign the attack vector? How does the malware author get the private half of a public key you trust for software installations? -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ jhardin@...sec.org pgpk -a jhardin@...sec.org key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never does quite what I want. I wish Christopher Robin was here." -- Peter da Silva in a.s.r ----------------------------------------------------------------------- 53 days until the Slovakian Presidential Election
Powered by blists - more mailing lists