full-disclosure - Administrivia: List Compromised due to Mailman Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <420B789A.4070206@sdf.lonestar.org>
From: bkfsec at sdf.lonestar.org (bkfsec)
Subject: Administrivia: List Compromised due to Mailman
	Vulnerability

Anders Langworthy wrote:

> Valdis.Kletnieks@...edu wrote:
>
>> Unless we have a Schrodinger's Cat John who manifests itself twice, once
>> saying "Yup" and once saying "Oh shit!". :)
>>
>
> Hehe.  Technically it doesn't work that way.  At this very moment, the 
> certificate can be both valid and invalid.  However, once we query 
> John about his state (akin to opening the bag and checking up on the 
> Cat) and he produces an answer, the wave function that is John's SSL 
> Certificate has collapsed.  At that point, the certificate can either 
> be valid or invalid, but not both.  I strongly urge John to consider 
> the moral ramifications involved in destroying an otherwise harmless 
> duality, and hope he chooses to remain silent to keep things exciting.
>
Which of course brings up the interesting proposition that if 
Schrodinger's Cat were on the net, where would it's box be?

Which, of course, is followed up by the fact that if the Cat were on the 
net, it would cease being both alive and dead at the same time due to 
lag issues.

          -Barry