full-disclosure - Re: DLL hijacking with Autorun on a USB drive

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <201008312308.o7VN80SG023733@bari.maths.usyd.edu.au>
Date: Wed, 1 Sep 2010 09:08:00 +1000
From: paul.szabo@...ney.edu.au
To: cmorris@...odu.edu, dan@...para.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: DLL hijacking with Autorun on a USB drive

Dan Kaminsky <dan@...para.com> wrote:

>> I can differentiate my coolProposal.doc from msword.exe just fine..
>
> Uh huh. Here, let me go ahead and create 2010 Quarterly  
> Numbers.ppt.exe with a changed icon, and see what you notice.

So you (Dan) can differentiate. Why couldn't other do the same?
Do you honestly think you are so much smarter than anyone else?

Cheers, Paul

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/