[145841] in cryptography@c2.net mail archive
Fwd: [ PRIVACY Forum ] 'Padding Oracle' Crypto Attack Affects Millions of ASP.NET Apps
daemon@ATHENA.MIT.EDU (Steven Bellovin)
Mon Sep 13 17:09:27 2010
From: Steven Bellovin <smb@cs.columbia.edu>
Date: Mon, 13 Sep 2010 14:45:54 -0400
To: cryptography@metzdowd.com
Here's what happens when you get your integrity checks wrong....
Begin forwarded message:
> From: privacy@vortex.com
> Date: September 13, 2010 1:26:10 PM EDT
> To: privacy-list@vortex.com
> Subject: [ PRIVACY Forum ] 'Padding Oracle' Crypto Attack Affects =
Millions of ASP.NET Apps
> Reply-To: PRIVACY Forum Digest mailing list <privacy@vortex.com>
>=20
>=20
>=20
> 'Padding Oracle' Crypto Attack Affects Millions of ASP.NET Apps
>=20
> http://bit.ly/cnpzux (threatpost)
>=20
> --Lauren--
> Lauren Weinstein (lauren@vortex.com)
> http://www.vortex.com/lauren
> Tel: +1 (818) 225-2800
> Co-Founder, PFIR (People For Internet Responsibility): =
http://www.pfir.org
> Co-Founder, NNSquad (Network Neutrality Squad): http://www.nnsquad.org
> Founder, GCTIP (Global Coalition for Transparent Internet =
Performance):=20
> http://www.gctip.org
> Founder, PRIVACY Forum: http://www.vortex.com
> Member, ACM Committee on Computers and Public Policy
> Lauren's Blog: http://lauren.vortex.com
> Twitter: https://twitter.com/laurenweinstein
> Google Buzz: http://bit.ly/lauren-buzz
>=20
>=20
>=20
> _______________________________________________
> privacy mailing list
> http://lists.vortex.com/mailman/listinfo/privacy
>=20
--Steve Bellovin, http://www.cs.columbia.edu/~smb
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
