Full Disclosure mailing list archives
Re: Linux's unofficial security-through-coverup policy
From: Arturo 'Buanzo' Busleiman <buanzo () buanzo com ar>
Date: Wed, 16 Jul 2008 18:48:43 -0300
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Valdis.Kletnieks () vt edu wrote: | Similar reasoning applies to almost all uses of Linux in the embedded | world - if you already have code running on the cell phone, there really | isn't *anything* you can do by abusing something like the setldt() bug | that you couldn't *already* do to the box. I so agree! :) - It reminds me of an argentina group that released an "advisory" about a root exploit... that required root privileges to be exploitable. I LOLed (and was embarrassed, too, I'm an argentine) for a week. - -- Arturo "Buanzo" Busleiman Independent Linux and Security Consultant - SANS - OISSG - OWASP http://www.buanzo.com.ar/pro/eng.html Mailing List Archives at http://archiver.mailfighter.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIfmy7AlpOsGhXcE0RCi41AJ48aEeDDCVH2ueY/9DGa3KmcCEaQgCfUmDN TSAb2cS0yc+jv7McBoIwe0I= =WmQg -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: [Dailydave] Linux's unofficial security-through-coverup policy, (continued)
- Re: [Dailydave] Linux's unofficial security-through-coverup policy Joel Jose (Jul 18)
- Re: [Dailydave] Linux's unofficial security-through-coverup policy Valdis . Kletnieks (Jul 18)
- Re: [Dailydave] Linux's unofficial security-through-coverup policy Joel Jose (Jul 18)
- Re: Linux's unofficial security-through-coverup policy Brad Spengler (Jul 16)
- Re: Linux's unofficial security-through-coveruppolicy Garrett Groff (Jul 16)
- Re: [Dailydave] Linux's unofficial security-through-coverup policy Dave Aitel (Jul 17)
- Re: [Full-disclosure] [Dailydave] Linux's unofficial security-through-coverup policy Steve Grubb (Jul 17)
- Re: Linux's unofficial security-through-coverup policy Brad Spengler (Jul 17)