linux-kernel - Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4673B913.2020506@dgreaves.com>
Date:	Sat, 16 Jun 2007 11:18:59 +0100
From:	David Greaves <david@...eaves.com>
To:	Krzysztof Halasa <khc@...waw.pl>
Cc:	Linus Torvalds <torvalds@...ux-foundation.org>,
	Daniel Hazelton <dhazelton@...er.net>,
	Michael Gerdau <mgd@...hnosis.de>,
	Alexandre Oliva <aoliva@...hat.com>,
	Lennart Sorensen <lsorense@...lub.uwaterloo.ca>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>,
	"david@...g.hm" <david@...g.hm>,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>, mingo@...e.hu
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

Krzysztof Halasa wrote:
> David Greaves <david@...eaves.com> writes:
> 
>>> How hard would it be to reprogramm the flash?
>> The flash contains hashes signed by the companies private key.
>>
>> The kernel contains the public key. It can decrypt the hashes but the
>> private key isn't available to encrypt them. So although you can put a
>> new application onto the system, you can't create a signed hash to
>> write to the flash.
 >
> Then how hard would it be to reprogram the flash, to get rid of all
> this crap? Or to just put your public key there.
> 
> Do they at least use BGA type of flash chips so you can't attach
> a clip and have to use something more demanding?

Stop trying to technically crack my 5-minute fag-packet design - that's easy and 
boring :)

Tivo have solved this problem - use their solution - but do it on something more 
general purpose.

Help fix it - the point is more "is this feasible". And if it is, "does it matter?"


David


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/