Full Disclosure mailing list archives
Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ...
From: Brian Eckman <eckman () umn edu>
Date: Thu, 12 Feb 2004 13:46:18 -0600
Drew Copley wrote: <mass snippage>
But, it turns out, that the guys who can write exploit code also can reverse engineer patches...
</mass snippage>You said it all in that sentence. No other commentary was necesary to make your point.
Besides reading exploit code (if such code were released, which it was not), I'd imagine (as you mention) reverse engineering the patch and/or sniffing the network traffic of your (or another) scanner in action would be much more productive methods of determining how to write an exploit than your advisory was.
Brian -- Brian Eckman Security Analyst OIT Security and Assurance University of Minnesota "There are 10 types of people in this world. Those who understand binary and those who don't." _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Drew Copley (Feb 11)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Paul Tinsley (Feb 12)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Gregory A. Gilliss (Feb 12)
- Re: <to various comments>EEYE: Microsoft ASN.1 ... Ake Nordin (Feb 13)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Jason Stout (Feb 12)
- [Full-Disclosure] RE: [kinda-but-not-really-Full-disclosure-so-we-feel-warm-and-fuzzy] Re: <to various comments>EEYE: Microsoft ASN.1 ... Brett Moore (Feb 12)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Gregory A. Gilliss (Feb 12)
- <Possible follow-ups>
- RE: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Drew Copley (Feb 12)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Brian Eckman (Feb 12)
- RE: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Kenton Smith (Feb 12)
- RE: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Drew Copley (Feb 12)
- Re: Re: Re: <to various comments>EEYE: Microsoft ASN.1 ... Paul Tinsley (Feb 12)