[Full-disclosure] Thomas Ptacek and Wikipedia

2007-12-15 Thread Gobbles is back
ALERT ALERT

Quick cheeky posting by unknown gobble member staff over Thomas Ptacek's
latest Wikipedia absurdness. lol ... Finally Symantec has taken notice, and
started to add there own stuff to SF .. FINALLY !!!



http://turkeychargen.blogspot.com
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Thomas Ptacek and Wikipedia

2007-12-15 Thread coderman
On Dec 14, 2007 8:22 AM, Gobbles is back [EMAIL PROTECTED] wrote:
 ...
 Quick cheeky posting by unknown gobble member staff over Thomas Ptacek's
 latest Wikipedia absurdness.

PS: Your Homework Assignments
Thomas Ptacek to retract all stupid commentary from world wide web.

examples: I don't think this is a timing attack; it's a side-channel
attack that exploits the fact that OpenSSL's impact on the branch
prediction cache leaks information.
correction: timing attacks are a subset of side channel attacks,
therefore the above comment is stupid.

examples: we were turning out more lines of code per day than my old
employer! Turns out I forgot about a little thing called QA
correction: detailing how poorly build security in and solid
engineering are applied to your forthcoming security product is bad.
it makes executives and marketing angry!

many more to list.

i expect 3,463,492 words rewritten double spaced on formal retraction
by end of week.



GOBBLES your homework is less gossip more sploits.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Thomas Ptacek and Wikipedia

2007-12-15 Thread coderman
On Dec 15, 2007 2:51 PM, coderman [EMAIL PROTECTED] wrote:
 ... I don't think this is a timing attack; it's a side-channel
 attack that exploits the fact that OpenSSL's impact on the branch
 prediction cache leaks information.

someone says to me, Branch Prediction Analysis side channel attacks
are not traditional timing attacks.

sure, not _traditional_ timing attack.  active interference for
targeted misses gives much more key than traditional passive timing.

but this is still a timing attack, even if one much more effective
than most.  someone is now informed.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/