[Fwd: Fwd: Breaking the links: Exploiting the linker]

[dave <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Forwarded. Sheesh.
- -dave


- -------- Original Message --------
Subject: Fwd: Breaking the links: Exploiting the linker
Date: Wed, 15 Dec 2010 13:48:52 +0000
From: Tim Brown <timb () nth-dimension org uk>
To: dave <dave () immunityinc com>

Dave,

I appreciated and agreed with your comments on Threat Post regarding the
linker issue I discussed with them affecting the Linux runtime linker.  I've
since done some more work looking at FreeBSD, Debian and Solaris and produced
a paper that discusses the original issue I blogged about and a number of
other issues I found and/or documented.

I tried to post the following email regarding the paper to dailydave for
review and feedback but I'm not subscribed from this address and your list
software bounces such mails rather than moderating them.  Would it be
posssible for you to forward this on (see below) as I'd rather not repost the
email from my work address.

Cheers,
Tim

- ----------  Forwarded Message  ----------

Subject: Breaking the links: Exploiting the linker
Date: Wednesday 15 December 2010, 02:14:20
From: Tim Brown <timb () nth-dimension org uk>
To: oss-security () lists openwall com, dailydave () lists immunityinc com

In the interests of a thorough peer review I'd be curious what people think of
the following paper I've been working on Linux and POSIX linkers:

http://www.nth-dimension.org.uk/downloads.php?id=77

A previous revision has already been reviewed but constructive criticism is
always useful.  There are some sections that I have removed whilst I wait on
vendors but I'm particularly interested in feedback on pertinent references or
threats that I may have missed.  As per the abstract, the aim of the paper
wasn't to claim everything as my own but rather to document as much about the
current state of art as possible.

Tim
- --
Tim Brown
<mailto:timb () nth-dimension org uk>
<http://www.nth-dimension.org.uk/>

- -----------------------------------------
- --
Tim Brown
<mailto:timb () nth-dimension org uk>
<http://www.nth-dimension.org.uk/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAk0Lco4ACgkQtehAhL0gheoF1gCeNs6APmdT63c8QnmCXu7HqaWQ
Iz0An2cTEJtNCw9iIBQPxJSL3dds6DK3
=z+F2
-----END PGP SIGNATURE-----

Attachment: signature.asc
Description:

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave