full-disclosure - trust? - win2k source code tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: lists2 at onryou.com (Cael Abal)
Subject: trust? - win2k source code tools

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sander wrote:

| Hi,
|
| am i right, that if this really works, it's not only a problem for
windows
| users, but for everyone surfing the internet?
|
| kick me if i'm wrong.. but that wouldn't be "cool"! :-)
|
| cheers,
| sander.

Nope, it sounds like the parent poster found tools to apply digital
signatures to binaries -- different from SSL certificates.

If you're running WinXP, check the properties of files found in this dir
for some examples:

C:\WINDOWS\RegisteredPackages\

C

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)

iD8DBQFAMXXJR2vQ2HfQHfsRAoriAJ4sOatVtYTrofmmBtJlsY//JHL5hwCbBbAH
nsRukqn+ne9AL6kE0jZYuBE=
=7uzT
-----END PGP SIGNATURE-----