lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Sat, 16 Jun 2007 11:18:59 +0100
From:	David Greaves <david@...eaves.com>
To:	Krzysztof Halasa <khc@...waw.pl>
Cc:	Linus Torvalds <torvalds@...ux-foundation.org>,
	Daniel Hazelton <dhazelton@...er.net>,
	Michael Gerdau <mgd@...hnosis.de>,
	Alexandre Oliva <aoliva@...hat.com>,
	Lennart Sorensen <lsorense@...lub.uwaterloo.ca>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>,
	"david@...g.hm" <david@...g.hm>,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>, mingo@...e.hu
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

Krzysztof Halasa wrote:
> David Greaves <david@...eaves.com> writes:
> 
>>> How hard would it be to reprogramm the flash?
>> The flash contains hashes signed by the companies private key.
>>
>> The kernel contains the public key. It can decrypt the hashes but the
>> private key isn't available to encrypt them. So although you can put a
>> new application onto the system, you can't create a signed hash to
>> write to the flash.
 >
> Then how hard would it be to reprogram the flash, to get rid of all
> this crap? Or to just put your public key there.
> 
> Do they at least use BGA type of flash chips so you can't attach
> a clip and have to use something more demanding?

Stop trying to technically crack my 5-minute fag-packet design - that's easy and 
boring :)

Tivo have solved this problem - use their solution - but do it on something more 
general purpose.

Help fix it - the point is more "is this feasible". And if it is, "does it matter?"


David


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ