Re: [Full-disclosure] DLL hijacking with Autorun on a USB drive

[Dan Kaminsky <dan@xxxxxxxxxxx>]

On Aug 31, 2010, at 4:08 PM, paul.szabo@xxxxxxxxxxxxx wrote:

> Dan Kaminsky <dan@xxxxxxxxxxx> wrote:
>
>>> I can differentiate my coolProposal.doc from msword.exe just fine..
>>
>> Uh huh. Here, let me go ahead and create 2010 Quarterly
>> Numbers.ppt.exe with a changed icon, and see what you notice.
>
> So you (Dan) can differentiate. Why couldn't other do the same?

It's not that they can't. It's that they don't, and we have huge  
amounts of data confirming this. Have you never been to a Moxie  
Marlinspike talk?  His success rates on SSL Stripping a tor node were  
100%. 100%!!!

> Do you honestly think you are so much smarter than anyone else?
>

It's not about intelligence, it's about what you and I care about. For  
example, I don't care about how cars work. I want to put my key in the  
ignition and go.

There's only so much anyone really cares about. Outside of our little  
club here, people want the computer to just work.



> Cheers, Paul
>
> Paul Szabo   psz@xxxxxxxxxxxxxxxxx   http://www.maths.usyd.edu.au/u/psz/
> School of Mathematics and Statistics   University of Sydney     
> Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/