[Leaf-devel] Embedded Systems (new LEAF host?)

2002-08-09 Thread David Douthitt
Did anyone else besides me see the write-up about the Sega Dreamcast from DefCon X? Apparently a couple of security people modified a Linux distribution for the Sega Dreamcast to "phone home" for use during penetration testing - that is, you could drop one of these Dreamcasts in a client's physic

Re: [Leaf-devel] Embedded Systems (new LEAF host?)

2002-08-09 Thread Julian Church
Hi All At 09:17 09/08/02 -0500, David Douthitt wrote: >Did anyone else besides me see the write-up about the Sega >Dreamcast from DefCon X? I saw a report about it at The Register - http://www.theregister.co.uk/content/55/26478.html I wonder if I'll be able to do the same with my PS2 :-) chee

[Leaf-devel] openssl: flurry of changes ???

2002-08-09 Thread Michael D. Schleif
Anybody care to shed light on the flurry of changes in openssl since last week? First, there was this on July 30: openssl-0.9.6e Then, yesterday: openssl-0.9.6f Now, today: openssl-0.9.6g I'm trying to keep ontop of these, since they impact packages that I maintain:

Re: [Leaf-devel] openssl: flurry of changes ???

2002-08-09 Thread Brad Fritz
On Fri, 09 Aug 2002 09:48:08 CDT mds wrote: > Anybody care to shed light on the flurry of changes in openssl since > last week? I don't have the full scoop, but I think these include fixes to the vulnerabilities found during the DARPA CHATS audit of OpenSSL. A search for "openssl" at http://sec

[Leaf-devel] OpenSSH 3.4p1 Trojaned

2002-08-09 Thread David Douthitt
There was recently a break-in at the main site for the OpenSSH 3.4p1 sources, and a back-door was inserted. The modified sources were caught quickly, but some may have been downloaded. The originals were not back-doored, and should be okay. The interesting thing is that this was not caught by s