Re: New embedded attack class

[<assault () hush com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

i cant seem 2 find a references section in your paper that links to
previous work in the subject. is this an intended rip-off or are
you simply another amateur? otoh:

http://lists.immunitysec.com/pipermail/dailydave/2007-
March/004136.html
http://ilja.netric.org/files/Unusual%20bugs%2023c3.pdf

i'm also not buying into this whole "new attack class" thing. can
you really call exploiting null derefs (something that we knew
possible for quite a while) a "new attack class" because you
"found" a platform-specific way to attack them? i'd say it's a new
attack vector, if anything.

and please, can the security industry pull itself together and stop
publishing half-baked material? i know the job market is tough and
you need to justify your salary, but this is getting ridiculous...

assault

On Sat, 05 May 2007 02:22:02 +0300 Barnaby Jack <bjack () juniper net>
wrote:
> Hey all,
>
> I've released a short paper on the new attack class mentioned in
> my CSW presentation.
>
> Respect to all those who didn't buy into quack speculation before
> the talk was given :)
>
> Vector Rewrite Attack: Exploitable NULL pointer vulnerabilities on
> ARM and XScale architectures
> http://www.juniper.net/solutions/literature/white_papers/Vector-
> Rewrite-Attack.pdf
>
> -Barnes
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> http://lists.immunitysec.com/mailman/listinfo/dailydave
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.5

wpwEAQECAAYFAkY8U08ACgkQwRKs9FnnsLTe2AP+LSfdCX6dnwWROzxXuJYq8zo96Fpx
3i78PuGAR1wEO1+kUtjwSzyYFLBTywp0N77/unYk4zDZs6+re0agFflXt8ZAfXNqagda
AlJ5AGoVsiyNaLLMRMPq9CaGslaIUGLtg0NkVSbjZhDGyN0Sh44gj19uVSgL4SXjp6v6
3B0C7zA=
=ACzq
-----END PGP SIGNATURE-----

--
Click to find great rates on medical insurance, save big, shop here
http://tagline.hushmail.com/fc/CAaCXv1QS4W2dsZzazZcksGxdrzPguW8/


_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave