full-disclosure - http://security.tombom.co.uk/moreshatter.html

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <871080DEC5874D41B4E3AFC5C400611E03089288@UTDEVS02.campus.ad.utdallas.edu>
From: pauls at utdallas.edu (Schmehl, Paul L)
Subject: http://security.tombom.co.uk/moreshatter.html

Interesting.  I had a lengthy email argument with a MS rep about
shatter.  He swore up and down that it wasn't a MS problem, but a bad
applications programmer problem.  He finally grudgingly admitted that MS
probably shouldn't make it so easy to be a bad applications programmer
and said he would forward my concerns to MS Security.  Maybe now they'll
actually take the issue seriously (yeah, right!)

Paul Schmehl (pauls@...allas.edu)
Department Coordinator
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/

> -----Original Message-----
> From: Georgi Guninski [mailto:guninski@...inski.com] 
> Sent: Tuesday, September 17, 2002 4:56 AM
> To: full-disclosure@...ts.netsys.com
> Subject: [Full-Disclosure] 
> http://security.tombom.co.uk/moreshatter.html
> 
> 
> http://security.tombom.co.uk/moreshatter.html