Hi, Since the cover is becoming more difficult to maintain, I've decided to stop this. It simply can't stand anymore and I can't let this harm my company and its customers.
I am David Maynor. I made up the LMH identity for bashing Apple and appearing on the media while I was preparing for launching Errata Security with Robert. Since my credibility was severely damaged after the wireless driver exploit, I needed a sock puppet. The idea of LMH and the Month of Apple Bugs came a while after I resigned from SecureWorks. I know some malicious people out there (including the Infosec Sellout, also known as Jon Ramsey... my old manager at SecureWorks) claim I was fired, but that's simply false. It seemed like a flawless public relations campaign for boosting the start of Errata and a great opportunity to attack Apple safely. It was also a safe from the standpoint of my old employer, SecureWorks, which had an agreement with Apple. After the Month of Apple bugs, the whole LMH thing became useless and there was no attention from media anymore. Although, the identity behind Infosec Sellout was unknown to me and Robert, thus I thought I could still give it a good use. I attempted to contact Infosec Sellout, writing a fake log of a SILC conversation with a story that seemed to be consistent. Surprisingly I managed to make him believe it was legitimate and he replied enthusiastically about publishing a post about it. Not a long while afterwards, I contacted my friend from StillSecure, Martin McKeay (we met at RSA with some other people) and decided to spread gossip and simulate a 'leak' about LMH's identity. I also feared that some people started to be suspicious, about LMH being, in fact, no other but myself: David Maynor. Again I had a way to cover up and find out who was behind the Infosec Sellout blog. Now the cover is not possible anymore, since Robert McMillan published information quoting H.D. Moore and Thomas Ptacek, stating that 'Infosec Sellout can't be LMH'. It mentions Dave Aitel's unmask.py tool being used to statically analyze the text of the different postings. This represents the inevitable failure of my intentions to maintain the LMH identity secret, and hence my decision to recognize it publicly before it gets back to Errata and our customers. I've been always a responsible professional in the information security industry. Those who have worked with me, including my ISS team: Chris Rouland, Tom Cross and David Dewey, can provide references and information about my skill base, my personal integrity and professionalism throughout my career in the industry. Tom was even sitting right next to me and David is now in a management position. They could explain why I decided to quit ISS to pursue a position at SecureWorks. Also others like Sherrod Degrippo from the Georgia Institute of Technology. bca2fee517ff50ddd01bb7d6ed9c3043 The above MD5 hash of a text file should serve as a proof in case someone attempts to deny the statements of this message. -- David Maynor aka LMH, CTO, Errata Security _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
