[LUAU] get ready for apple security bugs

2006-11-01 Thread Tim Newsham
http://blog.washingtonpost.com/securityfix/2006/11/exploit_released_for_unpatched_1.html The vulnerability is the first in a series of daily bug details to be released over the next 29 days as part of the Month of Kernel Bugs project. LMH said we can expect at least five more Apple kernel bugs

Re: [LUAU] get ready for apple security bugs

2006-11-01 Thread Jim Thompson
My my, will Maynor, Ellch and Krebs ever let it drop? Do you have any clue how long its been since Apple shipped a machine with a built-in, 11b-only 'Airport' card? Or the likelyhood that someone who cares about security is walking around with their card in an active scanning mode? And

Re: [LUAU] get ready for apple security bugs

2006-11-01 Thread Tim Newsham
My my, will Maynor, Ellch and Krebs ever let it drop? My understanding is that HDM found a vulnerability independantly and implemented an exploit for it. Not sure what this has to do with Maynor not letting it drop... jim Tim Newsham http://www.thenewsh.com/~newsham/

Re: [LUAU] get ready for apple security bugs

2006-11-01 Thread Jim Thompson
On Nov 1, 2006, at 11:30 AM, Tim Newsham wrote: My my, will Maynor, Ellch and Krebs ever let it drop? My understanding is that HDM found a vulnerability independantly and implemented an exploit for it. Phleeze. Its the same old send a malformed IE in a probe response (or beacon) frame

Re: [LUAU] get ready for apple security bugs

2006-11-01 Thread Tim Newsham
My understanding is that HDM found a vulnerability independantly and implemented an exploit for it. Phleeze. Its the same old send a malformed IE in a probe response (or beacon) frame crapfest that was in the Maynor/Ellch exploit. sure, but since maynor wasnt telling, HDM had to write his

Re: [LUAU] get ready for apple security bugs

2006-11-01 Thread Jim Thompson
On Nov 1, 2006, at 11:43 AM, Tim Newsham wrote: My understanding is that HDM found a vulnerability independantly and implemented an exploit for it. Phleeze. Its the same old send a malformed IE in a probe response (or beacon) frame crapfest that was in the Maynor/Ellch exploit. sure,