Re: This guy cracks me up. (Teemu Schaabl )

["blac beard" <blacbeard () gmail com>]

I'm confused.  Who discovered the Intel Centrino vulnerability?  I heard at
Blackhat that David Maynor discovered it.  At least he was bragging about it
over beers across from my table in Vegas.  Then during the talk, he showed a
slide that said you guys were NOT responsible for the Intel Centrino patches
that went out.  Now, you are saying you found it.  Can you clear this up?


-----Original Message-----
From: dailydave-bounces () lists immunitysec com
[mailto:dailydave-bounces () lists immunitysec com]
On Behalf Of johnny cache
Sent: Monday, September 04, 2006 12:29 PM
To: dailydave () lists immunitysec com
Cc: comments () daringfireball net
Subject: [Dailydave] This guy cracks me up. (Teemu Schaabl )

> isn't this gruber guy a webcreative-typeof? how would he understand
"the details"?

> just curious,
> teemu

Excellent question. I'll CC him and ask:

Hey Gruber, I just dropped details on remote code execution on the centrino
driver.
People technically qualified to comment on this agree and will be able to
reproduce it if they want. Also people technically qualified to comment on
it realize that this is not a 'bog standard' easy to do overflow. Its IMHO
one of the subtlest remote ring0 code execution bugs ever found. Of course,
thats not necessarily saying a whole lot because there have only been
handful found to begin with.

So why don't you go reproduce the intel bug, and tell all your readers its
real?
That is, if you're technically qualified to comment on this issue.

Still think I am, most likelly, "an outright fraud"?
-jc

P.S. Since you are probably -not- subscribed to mailing lists where people
discuss technical details of real attacks, heres a few links:
http://lists.immunitysec.com/pipermail/dailydave/2006-September/003458.html
http://www.metasploit.com/archive/framework/msg01174.html
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave