Re: NSRL status check

[Holt Sorenson <hso () nosneros net>]

On Mon, Dec 11, 2006 at 02:55:32PM -0500, dan () geer org wrote:
> The National Software Reference Library has or had a listing of the
> hash values for known good software, known good in the sense of
> what is on installation media or what otherwise still has its
> integrity intact.
>
> I say "has or had" as on first glance it appears that this listing
> is stationary since sometime in 2004.  Would someone here know the
> history and fate of this list? 

The way I read it, the most recent release was made October 2006:
http://www.nsrl.nist.gov/Downloads.htm#isos

> On the face of it such a list seems useful in forensic situations
> at least.

Indeed. Most commercial forensic software comes with instructions on
how to use NSRL RDS with the software.

-Holt

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave