lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 31 May 2010 10:56:05 -0400
From: T Biehn <>
Cc: full-disclosure <>
Subject: Re: Stealthier Internet access

Firstly: You know what you did.
Secondly: Screw you for not crediting the master.

(I am the master, you are the dog.)

Greetz & Love, Harmonious Profitability!


On Wed, May 26, 2010 at 1:03 AM, <> wrote:

> On Wed, 26 May 2010 10:15:32 +0545, Bipin Gautam said:
> > > it's a *bad* sector, so reading and recovering the data is a bitch...
> >
> > No, storing in Negative Disk, bad sector, stenography, slack space are
> > all bad places to store data!
> No, I meant it's usually not worth worrying that if the disk has done a
> hardware assignment of a replacement sector for a *real* live actual
> the-hardware-barfs-on-it bad sector, you can usually not worry about the
> contents of that bad sector, as the drive hardware won't let you access it
> directly anymore, redirecting you to the new replacement block.  So
> basically,
> somebody needs to take the disk apart and start doing the clean-room data
> recovery routine off the disk, trying to read 512 bytes of data at a time
> off
> known-physically-bad areas of the disk.
> And if your threat model includes adversaries that will do that, then
> you *really* need to be using full-disk encryption and thermite in your
> counter-defenses.  Oh, and a good countermeasure for rubber-hose crypto. ;)
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> Hosted and sponsored by Secunia -

FD1D E574 6CAB 2FAF 2921  F22E B8B7 9D0D 99FF A73C

Content of type "text/html" skipped

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -

Powered by blists - more mailing lists