full-disclosure - Re: Apache Killer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAEW7AC=5=0V43q6KeFkLVdZ5UFvbq+4rFuQ9G7ic7ZGnhupLKQ@mail.gmail.com>
Date: Wed, 24 Aug 2011 22:00:22 -0700
From: Dan Kaminsky <dan@...para.com>
To: root <root_@...ertel.com.ar>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Apache Killer

On Wed, Aug 24, 2011 at 9:45 PM, root <root_@...ertel.com.ar> wrote:

> On 08/25/2011 01:33 AM, Michal Zalewski wrote:
> >> Good catch, but you didn't provide for a working exploit at the time.
> >>
> >> Now I only see your name on the press. Why?
> >
> > I don't know why this is in the news at all, let alone with any
> > specific attribution. Perhaps you wanted to ask the journalists?;-)
> >
> > /mz
> >
>
> Fair enough.
> Journalist, next time please use this headline:
>
> "Asshole hacker Kingwhatever post Apache DoS exactly on friday night.
> Google reportedly has nothing to do with it."
>
>
So it's come to pass that there's more gold per ton of landfill, than there
is in the raw earth.

It's still gold.

Seriously.  This is Zalewski we're talking about.  If you've extended his
work, you're doing something right.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/