3 ms·
I don't like how he says the key was "cracked." The key was sitting there in the binary in plaintext. Any college student with a few years of Unix tools under
by danielweber 12y ago
I don't like how he says the key was "cracked."
The key was sitting there in the binary in plaintext. Any college student with a few years of Unix tools under his belt could have done it in an hour.
That's how horrible this tool was. Anyone who noticed this months ago could have been using this key to MITM people.
- orng 12y agoSure, but even though it was easy it still required "cracking". In the beginning the secret was not know but in the end the 'adversary' was able to determine the secret. In my mind "cracking" a password or a code refers to uncovering the secret which is exactly what was done in this case. If the password would have been brute forced over a couple of days you would probably call it cracking. The same principle should apply even if you guess the password to be "password" in the first try.
- grecy 12y agoI'm pretty sure if you had sensitive documents sitting on your desktop while your laptop was at a cafe and I moved your mouse to turn off the screen saver and opened the document, a good prosecution could spin that as "Cracking". It's a buzz word for sure, but unfortunately our industry is full of them
- TeMPOraL 12y ago> Any college student with a few years of Unix tools under his belt I was doing stuff like this when 15 using just Windows notepad and knowing jack squat about Linux. Seriously, anyone at any age who knows anything about (non-web) programming would find it by just opening an .exe in said notepad. That's how horrible this tool was. And I don't believe that no one noticed it and that it wasn't exploited already. It's just too easy to find.