full-disclosure - Re: Erratasec Research MD5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4ef5fec60705171357x617cd038h69ff65dac4400965@mail.gmail.com>
Date: Thu, 17 May 2007 13:57:01 -0700
From: coderman <coderman@...il.com>
To: "David Maynor" <david.a.maynor@...il.com>
Cc: full-disclosure@...ts.grok.org.uk, dailydave@...ts.immunitysec.com
Subject: Re: Erratasec Research MD5

On 5/17/07, David Maynor <david.a.maynor@...il.com>..

lol, sure dude.

> .. wrote:
>
> I've noticed a lot of people posting MD5

that's pretty lame, since even sha1 is deprecated.

speaking of which, when do i get my shiny new cipher suites with
SHA2-256?  IPsec is nice, but sometimes i need that TLS layer...

> ... I find it
> truly amazing that people in the security space still use wireless at all!

a vpn leaves you nothing but DoS.  sadly, we're not going to see
authentication in the 802.11 MAC for .. well, probably never.  *sigh*

as for ring0 beacons and other driver level hijinks, these appears to
have tapered off.  perhaps the next major re-write of wireless driver
infrastructure in the kernel(s) will open new windows of opportunity.
five+ years and wireless API's still suck.  wonderful!

> [ ... insert troll food here ... ]

loldongs, etc, etc.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/