full-disclosure - openssl exploit code

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: solareclipse at phreedom.org (Solar Eclipse)
Subject: openssl exploit code

On Mon, Sep 16, 2002 at 02:16:05PM -0600, Dave Ahmad wrote:
> An exploit code that lists you as the author has been posted to Bugtraq.
> I would like to request your permission before approving it for
> distribution on the list.

And you call Bugtraq a full disclosure list?

Weak.

Since you asked, my answer is no. You do not have my permission
to post my source code to Bugtraq or anywhere on SecurityFocus,
Symantec or any affiliated site.

This also covers the source of the apache-ssl worm, which includes
substantial stolen parts of my exploit code, unless those parts are
properly removed.

Solar Eclipse
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20020916/3f9648b1/attachment.bin