Dailydave mailing list archives

Your trusted computing base is not what you think it is! :>

From: dave <dave () immunityinc com>
Date: Thu, 15 Jul 2010 11:00:05 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Here are some trojans signed by a key from realtek, supposably. How cool is that! You
have to assume the signing key was at least as protected as their source code, right? :>

http://anti-virus.by/en/tempo.shtml

Likewise, people tend to ignore that when you send your bugs to CERT or MS, it's
likely the Russian organized crime is also reading it.

And, as pointed out:
http://news.netcraft.com/archives/2010/07/15/firefox-security-test-add-on-was-backdoored.html

So it's been an entertaining week! :>

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkw/InUACgkQtehAhL0gheoB+gCdGLghoDQ75myjNXY5Mtn9/st6
MKYAnjPGVV+JvJXcpTMP0dccn/zKFjP1
=a9Ry
-----END PGP SIGNATURE-----
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread:

Your trusted computing base is not what you think it is! :> dave (Jul 15)
- Re: Your trusted computing base is not what you think it is! :> Shane (Jul 15)
  - Re: Your trusted computing base is not what you think it is! :> Florian Weimer (Jul 19)