funsec mailing list archives

Re: Microsoft patches x.509 null-truncation attack


From: "Larry Seltzer" <larry () larryseltzer com>
Date: Tue, 13 Oct 2009 14:25:23 -0400

You need to work on your self-promotion buddy. I had no idea.

 

Larry Seltzer
Contributing Editor, PC Magazine

larry_seltzer () ziffdavis com 

http://blogs.pcmag.com/securitywatch/

 

From: Dan Kaminsky [mailto:dan () doxpara com] 
Sent: Tuesday, October 13, 2009 2:24 PM
To: Larry Seltzer
Cc: funsec () linuxbox org
Subject: Re: Microsoft patches x.509 null-truncation attack

 

We both found the bug...

On Tue, Oct 13, 2009 at 10:16 AM, Larry Seltzer <larry () larryseltzer com>
wrote:

http://www.microsoft.com/technet/security/Bulletin/MS09-056.mspx

 

Dan - Why do they thank you for reporting this bug and not Moxie
Marlinspike? I thought it was his.

 

Larry Seltzer
Contributing Editor, PC Magazine

larry_seltzer () ziffdavis com 

http://blogs.pcmag.com/securitywatch/

 

 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: