Re: Some Sums

[Ari Takanen <ari.takanen () codenomicon com>]

Hmmm, distantly related to this: Maybe us fuzzer developers should
save hashes of some millions of attacks somewhere also, so that we can
prove our tools were used to find the flaws in the first
place... Looking at past iDefence disclosures for example, I am
beginning to doubt that they reward for publishing flaws instead of
finding flaws (this is like patent system in Europe which rewards
first to file, not first to invent)... More and more flaws are found
using tools, and pre-packaged attacks. If a flaw is found using a
product like Codenomicon/PROTOS or CANVAS, I supposed the reward
should also be paid to the tool developer and not the tool user. ;)

Tongue-in-the-cheek-greetings,

/Ari

> Date: Wed, 7 Feb 2007 02:11:16 -0500 (EST)
> From: "Steven M. Christey" <coley () mitre org>
> Subject: Re: [Dailydave] Some Sums
> To: dailydave () lists immunitysec com
> Message-ID: <200702070711.l177BGJw026300 () faron mitre org>
>
>
> >   I take it that's going to be the hash of some file or other data
> >   you're > going to produce for someone at sometime in the future?
> >   Couldn't you just > have used a ZK protocol and left us all out of
> >   it? ;-) If you're going to use > our inboxes as substitutes for
> >   escrow/notarisation centres, you could perhaps > tell us just a
> >   little bit more about what you're doing!
>
> MD5/SHA-1 crackability issues aside*, the next question that
> immediately comes to mind is why there isn't a central place for
> researchers to do exactly this - make a claim about knowledge that's
> provably fixed in a certain place and time.  Oh, wait, we're all
> individuals and we don't need anybody else.  There's no need to
> organize in any way, shape, or form.  After all, when Ilfak posted
> that third-party patch, ABSOLUTELY EVERYBODY knew who he was and
> immediately trusted him, so why not Halvar?  Sorry, I forgot about the
> outside world for a second.
>
>
> Snarkily and respectfully,
> Steve
>
>
> * crypto is my kryptonite, I defer to the geniuses.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave