full-disclosure - Administrivia: List Compromised due to Mailman Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: hades at psilanthropy.org (Anders Langworthy)
Subject: Administrivia: List Compromised due to Mailman
	Vulnerability

Valdis.Kletnieks@...edu wrote:
> Unless we have a Schrodinger's Cat John who manifests itself twice, once
> saying "Yup" and once saying "Oh shit!". :)
> 

Hehe.  Technically it doesn't work that way.  At this very moment, the 
certificate can be both valid and invalid.  However, once we query John 
about his state (akin to opening the bag and checking up on the Cat) and 
he produces an answer, the wave function that is John's SSL Certificate 
has collapsed.  At that point, the certificate can either be valid or 
invalid, but not both.  I strongly urge John to consider the moral 
ramifications involved in destroying an otherwise harmless duality, and 
hope he chooses to remain silent to keep things exciting.