RE: [Full-Disclosure] Malware added in transit

[Stephen Blass]

Yes, software can be modified in transit. See the 1995 paper

 

http://www.cs.berkeley.edu/~daw/papers/endpoint-security.html

 

 

" These work because the trusted path to executables is really not trustworthy in most environments. Although we use on-the-wire patching to compromise executables, the client binaries can also be compromised during download, by on-the-wire patching of FTP or HTTP transfers. "

 

-

Steve Blass

[EMAIL PROTECTED]

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Paul
Sent: Thursday, March 18, 2004 7:47 AM
To: [EMAIL PROTECTED]
Subject: [Full-Disclosure] Malware added in transit

Thanks for the clarification, Curt.

one step at a time...

---

Find local movie times and trailers on Yahoo! Movies.