Bugtraq mailing list archives
Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
From: Glynn Clements <glynn.clements () virgin net>
Date: Wed, 11 Feb 2004 04:04:54 +0000
der Mouse wrote:
Signed applications and signed DLLs and signed drivers [...] coming to a Unix near you SOONER rather than later.Or is that the kind of thing you disable upon installation because it gets in the way of you being able to install whatever "you" want ?Depends. Does it include the tools necessary to sign my own code? If not, yes, I will disable it, to the point of running a different OS if necessary. If so, what's to stop a malware creator from using those same tools to sign the attack vector?
You don't have to store the signing key on every host which needs to run the signed binaries. -- Glynn Clements <glynn.clements () virgin net>
Current thread:
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer, (continued)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Seth Arnold (Feb 09)
- RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer David Schwartz (Feb 09)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed (Feb 10)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse (Feb 10)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer John D. Hardin (Feb 11)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse (Feb 11)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed (Feb 12)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse (Feb 12)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed (Feb 12)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer der Mouse (Feb 12)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Darren Reed (Feb 10)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Glynn Clements (Feb 12)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Peter Pentchev (Feb 10)
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer Nexus (Feb 11)