[33636] in bugtraq
Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet
daemon@ATHENA.MIT.EDU (John D. Hardin)
Wed Feb 11 22:16:58 2004
Date: Tue, 10 Feb 2004 16:28:31 -0800 (PST)
From: "John D. Hardin" <jhardin@impsec.org>
To: der Mouse <mouse@Rodents.Montreal.QC.CA>
Cc: Darren Reed <avalon@caligula.anu.edu.au>, bugtraq@securityfocus.com
In-Reply-To: <200402102113.QAA06593@Sparkle.Rodents.Montreal.QC.CA>
Message-ID: <Pine.LNX.4.10.10402101627500.19813-100000@gypsy.impsec.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Tue, 10 Feb 2004, der Mouse wrote:
> Depends. Does it include the tools necessary to sign my own code?
>
> If so, what's to stop a malware creator from using those same tools to
> sign the attack vector?
How does the malware author get the private half of a public key you
trust for software installations?
--
John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/
jhardin@impsec.org pgpk -a jhardin@impsec.org
key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
53 days until the Slovakian Presidential Election
