Re: [PATCH] Delete cryptoloop

[Fruhwirth Clemens <clemens-dated-1091646955.2125@endorphin.org>]

[-- Attachment #1: Type: text/plain, Size: 970 bytes --]

On Sun, 2004-07-25 at 21:09, Lee Revell wrote:
> On Sun, 2004-07-25 at 14:02, Fruhwirth Clemens wrote:
> > On Sun, 2004-07-25 at 19:25, Jari Ruusu wrote:
> > > > Where is the exploit?
> > > 
> > > wget -O cryptoloop-exploit.tar.bz2 "http://marc.theaimsgroup.com/?l=linux-kernel&m=107719798631935&q=p3"
> > 
> > That's no exploit. Where is the exploit?
> > http://www.google.com/search?q=jargon%20exploit
> > When you're there, you can look up the term ``backdoor'' as well. 
> > 
> 
> I am confused.  Are you suggesting it's not an exploit because it
> doesn't work remotely?  That would make it a local exploit.

I'm suggesting it doesn't work at all. The worst security problems have
been discussed in my first posting already:
http://lkml.org/lkml/2004/7/24/51

I vote for a change in the on-disk format, but not because of one of the
reasons, Jari has put forward.

-- 
Fruhwirth Clemens <clemens@endorphin.org>  http://clemens.endorphin.org

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]