full-disclosure-uk January 2010 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: Re: [Full-disclosure] All China, All The Tim

Re: [Full-disclosure] All China, All The Time

From: Densmore, Todd <todd.densmore_at_nospam>
Date: Tue Jan 19 2010 - 19:51:35 GMT
To: "full-disclosure@lists.grok.org.uk" <full-disclosure@lists.grok.org.uk>

Mark, Dan, Smasher, etc. Thanks for the feedback.

I saw the thread this weekend, but I had to wait until I today to respond. My main motivation was to point out that there is no free lunch, and often even security professionals forget to think critically. It was not meant to be a thorough assessment of the actual 0-day. However I appreciate the correction, the details of the exploit, and the observation that its sophistication was probably exaggerated in the media.

I have changed some implicit wording in the article about China and added an addendum to the blog to clarify the exploit and thank sources.


Todd Densmore
HP Software - Application Security Center todd.densmore@hp.com
770.343.7054 Office

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/