full-disclosure - Secuirty Hole Found In Dave's Sock

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Sep  8 18:52:07 2005
From: phil at redmoon.ch (Philipp Walther)
Subject: Secuirty Hole Found In Dave's Sock

John,

John Kinsella wrote:
 > Is anybody else seeing these attacks?  Is this the China hackers > again?

Dave wrote it's impact is only locally exploitable, but being serious 
researchers, we cannot the ignore the fact that it could be some sort of 
  man - or even woman ! - in-the-middle attack.

Maybe Dave can trace the socks' way back?

 > I think I saw a hole last week, but my logs aren't that great so I'm
 > going to have to go back and double-check.
 >
 > Could this be related to socks disappearing?  Anybody have signatures
 > for snort?

Someone got good contacts to the snort guys?

-Phil