full-disclosure - Kaminsky's DNS Issue Leaked?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 21 Jul 2008 17:56:30 -0500
From: natron <shiftnato@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Kaminsky's DNS Issue Leaked?

It appears matasano posted an explanation of Dan Kaminsky's DNS issue
to their blog today, but looks like it may have been yanked back down.
 My google reader account nabbed it via the RSS feed while it was up.

It looks like maybe they had this typed up, ready to hit "post" as
soon as someone else figured it out?  They had advance knowledge of
the issue via conference calls with Kaminsky.  Halvar Flake posted
some speculation on what the issue was, but his speculation was not
the full issue; only a re-hash of previously known issues.  In any
event, Halvar's ideas were close, but incomplete.  Matasano filled in
the missing details, possibly by accident.  :)

Details: http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html

-N

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/