I'm all for warning us about problems with encryption, but why post source
code on how to decrypt the passwords? I can definately see the benefit of
being notified about security risks like this, but how often do you see a
security risk posted along with enough info to launch an attack with?
Maybe I'm the only one that gets concerned with posts like these....
My $.02
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mike
Sent: Tuesday, December 21, 1999 10:16 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] [w00giving '99 #11] IMail's password
encryption scheme
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Well lets analyze the situation. First the problem described in the
advisory effects the users of Imail. Second, the forum is about
Imail.
Third, not all people subscribe to or look at computer security lists
etc.
Therefore I thought that the people who subscribe to this forum and
do not
subscribe to the lists in which the advisory was posted, would
benefit from
it being posted.
If you don't feel the same remember it is an open forum like you
said.
Mike
eEye Digital Security Team
www.eEye.com
Fingerprint:
AD0F 16F9 0067 7772 EFA9 996F 9AD2 5F16 A6AF EA7C
- ----- Original Message -----
From: "Scott Pouliot" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, December 21, 1999 8:57 PM
Subject: RE: [IMail Forum] [w00giving '99 #11] IMail's password
encryption
scheme
> Can I ask what would possess you to post this in an open forum?
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Mike
> Sent: Tuesday, December 21, 1999 9:52 PM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] [w00giving '99 #11] IMail's password
> encryption scheme
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>
iQA/AwUBOGBChZrSXxamr+p8EQIeTACdGS4pdERAKef2xCdfC9szfz021H0AoKNt
jNxv4TMtgdK0aOXkzS8MofMW
=Xj03
-----END PGP SIGNATURE-----
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
