bugtraq - Re: Resolved - NNT Change Tracker - Hard-Coded Encryption Key Originally posted as http://seclists.org/fulldisclosure/2011/May/460

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 29 Jun 2011 21:22:27 GMT
From: dennis.brunnen@...il.com
To: bugtraq@...urityfocus.com
Subject: Re: Resolved - NNT Change Tracker - Hard-Coded Encryption Key 
 Originally posted as http://seclists.org/fulldisclosure/2011/May/460

As is probably obvious to other readers, I did indeed notify NNT by email of the vulnerability before making it public - as mentioned in my initial disclosue. I'm not sure what possible reason anyone would have to say that if it were not true.

Glad to see you apparently did the right thing and eventually fixed it though.