full-disclosure - RE: JAP back doored

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: Vincent.Penquerch at artworks.co.uk (Vincent Penquerc'h)
Subject: RE: JAP back doored

> "CAMsg::printMsg(LOG_INFO,"Loading Crime Detection Data....\n");"
> "CAMsg::printMsg(LOG_CRIT,"Crime detected - ID: %u - Content:
> \n%s\n",id,crimeBuff,payLen);"

Well, people say the JAP team hid it, but with that (assuming the
strings appeared verbatim in the binary), they made sure someone
would spot it. They essentially made sure the users would be warned
about it while keeping plausible deniability.

-- 
Vincent Penquerc'h