Re: Debian audititing tool?

[Rainer Weikusat]

Christian Kurz <[EMAIL PROTECTED]> writes:
> > Debsums seems to help a little bit - you can expect to catch some less-clueful
> > intruders with it, but it doesn't help in general.
> 
> debsums just uses md5sums which can be manipulated on the one hand and
> on the other hand you modify binaries so that the md5sum will still be
> the same.

So you've effectively broken MD5 in a way that would yield useful
results (ie would allow you to replace a specific binary with another
specific binary, not with some more or less random garbage). How came
it that you weren't prominently mentionend in this month's cryptogram?

-- 
SIGSTOP


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]