full-disclosure - Re: Updates for SSH Tectia plaintext recovery vulnerability released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 18 Nov 2008 11:01:16 -0500
From: adrian.lamo@...hmail.com
To: full-disclosure@...ts.grok.org.uk, juha-matti.laurio@...ti.fi
Subject: Re: Updates for SSH Tectia plaintext recovery
	vulnerability released

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Juha,

Is there a reason that you and your security team decided not to
cover these breaking bits of important information security news in
your blog?  What merits security news being reposted to this list,
vs the quality of security news that earns column in your e-zine?
I used to depend on your website as my single source of relevant
information security news, knowing you and your co-conspirators
would blab about anything I need to know but now I am developing
some serious doubts as to your dedication to this community and the
integrity of your services.

Can you please clarify?

- -al

On Tue, 18 Nov 2008 10:10:42 -0500 Juha-Matti Laurio <juha-
matti.laurio@...ti.fi> wrote:
>There is no any blog entry and there is no entry related to Skype
>issue mentioned in Heise.de's article.
>
>Juha-Matti
>
>adrian.lamo@...hmail.com kirjoitti:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Dearest Juha,
>>
>> I am unable to find a blog entry on your website regarding this
>> advisory.  Please advise.
>>
>> - -al
>>
>> On Tue, 18 Nov 2008 08:19:43 -0500 Juha-Matti Laurio <juha-
>> matti.laurio@...ti.fi> wrote:
>> >It appears that a patch for SSH Tectia plaintext recovery
>> >vulnerability
>> >(reference:
>> >http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt )
>> >has been released:
>> >
>> >November 14, 2008 - Plaintext Recovery Attack Against SSH
>> >http://www.ssh.com/company/news/article/953/
>> >
>> >Juha-Matti
>> >
>> >_______________________________________________
>> >Full-Disclosure - We believe in it.
>> >Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >Hosted and sponsored by Secunia - http://secunia.com/
>> -----BEGIN PGP SIGNATURE-----
>> Charset: UTF8
>> Note: This signature can be verified at
>https://www.hushtools.com/verify
>> Version: Hush 3.0
>>
>>
>wpwEAQMCAAYFAkki0GEACgkQ8J2EGU1ixm6f8gP/ZxUMDhIBaRUAYmOeeizCJ+X3qE8
>f
>>
>Mg9ZLIpeJ6NZZA+xTHD8B2jPVBcqtW+HxTLT03iMPlDfe/gdksuYecvG62knaJlfN1z
>Y
>>
>1LtVHOVSaM33cl0iaphSxBoFU3LQKMQmXgI8XTKC77wE4R/2Ot9X7Vs1Qm34UzobOem
>Y
>> YZLSNTI=
>> =XGK3
>> -----END PGP SIGNATURE-----
>>
>> --
>> Click to become a master chef, own a restaurant and make
>millions.
>>
>http://tagline.hushmail.com/fc/PnY6qxtWo9aUb1Xu6VCEqDwRQOoLIOegC7ys
>vWZZe4VfYt163sJZY/
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Version: Hush 3.0
Note: This signature can be verified at https://www.hushtools.com/verify

wpwEAQMCAAYFAkki5swACgkQ8J2EGU1ixm4OuwP/eYQFI38H/zqAB9S8xaLSzNtaj5RP
LRIWLtFoUzRbDG5Ji65eQrwaRdNDS/R32iyskABJFzi7JjgPQnZ4cwmxNgg31IY+meIt
U9x4iIeE++D4veHQi7UcsvpAWVHjKrB2jcKzohcgZgnOCe6taX9EX2A9IIfjPXlI0P2e
oHWycVg=
=cE56
-----END PGP SIGNATURE-----

--
How clean is your air? Click here for high quality air purifiers.
http://tagline.hushmail.com/fc/PnY6qxtybN5y5elV9bN6zdMSmi5gZ57FFSv4iiEZUooi7sg5opoda/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/