[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] trust? - win2k source code tools

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sander wrote:

| Hi,
|
| am i right, that if this really works, it's not only a problem for
windows
| users, but for everyone surfing the internet?
|
| kick me if i'm wrong.. but that wouldn't be "cool"! :-)
|
| cheers,
| sander.

Nope, it sounds like the parent poster found tools to apply digital
signatures to binaries -- different from SSL certificates.

If you're running WinXP, check the properties of files found in this dir
for some examples:

C:\WINDOWS\RegisteredPackages\

C

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)

iD8DBQFAMXXJR2vQ2HfQHfsRAoriAJ4sOatVtYTrofmmBtJlsY//JHL5hwCbBbAH
nsRukqn+ne9AL6kE0jZYuBE=
=7uzT
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html