full-disclosure - Master-Keyed Lock Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <ILEPILDHBOLAHHEIMALBEEGFEKAA.jasonc@science.org>
From: jasonc at science.org (Jason Coombs)
Subject: Master-Keyed Lock Vulnerability

Knowledge penetration is limited by a number of barriers including the
widespread social vulnerability caused by illiteracy, and a large number of
illiterate rely on door locks for personal security.

An intelligent burglar would plan ahead by forging a letter of authorization
to enter the premises and remove property. By doing this and making
themselves a key to the front door, they stand little chance of ever being
prosecuted because the police and criminal courts won't get involved in
civil disputes.

It's encouraging to see more attention being given to social engineering
exploits enabled by blind faith in technology. We've all clearly understood
these things since we were nine or ten years old, but there's no reason to
be annoyed when the rest of the world catches up to us.

Jason Coombs
jasonc@...ence.org

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of sockz loves
you
Sent: Thursday, January 23, 2003 3:49 PM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Master-Keyed Lock Vulnerability

WOW!!! OMFG!!!!
THANK GOD THE SECURITY INDUSTRY IS HERE IN TIME TO SAVE THE DAY ~!!!
OMFG~!~!!

and you're all only what?  4?  5 years behind?
none of this is new.