full-disclosure - Re: [FD] Legitimacy of new Heartbleed exploit?

Open Source and information security mailing list archives

Message-ID: <535AB31C.5020500@petermalone.org>
Date: Fri, 25 Apr 2014 15:10:20 -0400
From: Peter Malone <peter@...ermalone.org>
To: Dillon Korman <me@...lonkorman.com>
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Legitimacy of new Heartbleed exploit?

You mean the same guys who brought this? http://pastebin.com/XHyE9UJx

Broken English, email address with capital letters. I'm extremely 
skeptical.

On 04/25/14 14:18, Dillon Korman wrote:
> Saw a link to this:
> http://pastebin.com/qPxR9BRv
>
> There is no actual exploit code in there since they insist of keeping it private. Do you think there really is a working exploit on new versions of OpenSSL?
>
> _______________________________________________
> Sent through the Full Disclosure mailing list
> http://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives