full-disclosure - Allchin bug p-o-c.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <41ED05A9F32CD411984A002035875DEB0724AD79@exchsrvnj.everestre.com>
From: Andrew.Berges at everestre.com (Andrew.Berges@...restre.com)
Subject: Allchin bug p-o-c. 

So how large of an impact are we looking at here for the average networked
environment?  I don't see this service running on any of our servers here,
although the exe is most definitely there ... is this a subprocess that gets
spawned as necessary to allow applications to communicate with the OS?  

Pardon my ignorance.

Regards,

Andrew Berges - Associate Manager, Systems
Everest Global Services
908.604.3020
andrew.berges@...restre.com

-----Original Message-----
From: Valdis.Kletnieks@...edu [mailto:Valdis.Kletnieks@...edu] 
Sent: Tuesday, October 07, 2003 1:27 PM
To: Andrew.Berges@...restre.com
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Allchin bug p-o-c. 

On Tue, 07 Oct 2003 11:02:13 EDT, Andrew.Berges@...restre.com  said:
> Hi,
> 
> I'm rather new to this list, and I think I may have missed some of the
> background on this - could someone bring me up to speed as to what is
> happening here?

Allchin said under oath that Microsoft didn't want to release the APIs,
because
some of them were so crufty that to release them would jeopardize national
security.

Ever since then, people have been looking for what API he was talking about.