RE: Allchin bug p-o-c.

[Andrew.Berges () everestre com]

So how large of an impact are we looking at here for the average networked
environment?  I don't see this service running on any of our servers here,
although the exe is most definitely there ... is this a subprocess that gets
spawned as necessary to allow applications to communicate with the OS?  

Pardon my ignorance.

Regards,

Andrew Berges - Associate Manager, Systems
Everest Global Services
908.604.3020
andrew.berges () everestre com


-----Original Message-----
From: Valdis.Kletnieks () vt edu [mailto:Valdis.Kletnieks () vt edu] 
Sent: Tuesday, October 07, 2003 1:27 PM
To: Andrew.Berges () everestre com
Cc: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Allchin bug p-o-c. 

On Tue, 07 Oct 2003 11:02:13 EDT, Andrew.Berges () everestre com  said:
> Hi,
>
> I'm rather new to this list, and I think I may have missed some of the
> background on this - could someone bring me up to speed as to what is
> happening here?

Allchin said under oath that Microsoft didn't want to release the APIs,
because
some of them were so crufty that to release them would jeopardize national
security.

Ever since then, people have been looking for what API he was talking about.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html