Re: WPA2 bugz - One Man's Quick & Dirty Response

2017-10-20 Thread WhiteWinterWolf (Simon)
Hi Benjamin, Le 20/10/2017 à 04:14, Benjamin Kaduk a écrit : Alas, it is left that way all too often. Since we're on the topic, I'll link http://web.mit.edu/kerberos/krb5-latest/doc/admin/install.html and note that that is quite different from the Heimdal included in the FreeBSD base system.

Re: freebsd-security Digest, Vol 634, Issue 3

2017-10-19 Thread WhiteWinterWolf (Simon)
Hi Walter, Le 18/10/2017 à 22:52, Walter Parker a écrit : > SMB has supported authentication signing for a long time (more than a > decade). That can be used for basic security. > SMB3 supports encryption. To work with SMB3 encryption you will need > at least Windows 8. > The Samba project

Re: WPA2 bugz - One Man's Quick & Dirty Response

2017-10-19 Thread WhiteWinterWolf (Simon)
Hi Benjamin, Le 19/10/2017 à 00:43, Benjamin Kaduk a écrit : NFS has no built-in encryption, it may be possible to tunnel it but this is out-of-scope here (using a VPN and tunnel everything would be easier than nitpicking and tunnel only the NFS data flow). This statement is either false or

Re: WPA2 bugz - One Man's Quick & Dirty Response

2017-10-18 Thread WhiteWinterWolf (Simon)
Hi Ronald, Le 18/10/2017 à 06:00, Ronald F. Guilmette a écrit : > > In message <49252eda-3d48-f7bc-95e7-db716db4e...@whitewinterwolf.com>, > "WhiteWinterWolf (Simon)" <freebsd.li...@whitewinterwolf.com> wrote: > >> Ideally, you would use a specific pr

Re: WPA2 bugz - One Man's Quick & Dirty Response

2017-10-17 Thread WhiteWinterWolf (Simon)
Hi Ronald, I have yet to investigate this WPA2 thing on my side, too much contradictory informations depending on the sources yet. Let me however add my two cents regarding your issue: A network can be divided in several logical layers: the data link layer (here WiFi), the networking layer

Re: Re.: BadUSB - On Accessories that Turn Evil, by Karsten Nohl + Jakob Lell

2017-09-21 Thread WhiteWinterWolf (Simon)
Hi Julian, You don't need microscopic chips or highly engineered devices to implement a working BadUSB attack. Nothing looks more as a Dell mouse than another Dell mouse, and a malicious mouse offers plenty of space to store all the chips you may want. USB sticks are also still widely found

FreeBSD <= 10.3 jail SHM hole

2017-08-16 Thread WhiteWinterWolf (Simon)
AFFECTED PRODUCTS This issue affects FreeBSD from 7.0 to 10.3 included. DESCRIPTION FreeBSD jail incompletely protects the access to the IPC primitives. The 'allow.sysvipc' setting only affects IPC queues, leaving other IPC objects unprotected, making them reachable system-wide independently