Re: the Bug-Travel Attack (Was: Re: [cobalt-developers] Fixing the nasty RaQ Hack...)

["cbtrussell" <cbtrussell@xxxxxxxxxxx>]

> cbtrussell wrote:
>
> > Pardon my ignorance...the unavailability of the list(s) the last few
days
> > makes this alert seem a bit out of place/disjointed.
> >
> > Has a new exploit been discovered in the past few days? I haven't heard
> > about anything new.
>
> Brandon, this is about two weeks old, and has been discussed on other
> lists...
>
> Greg Boehnlein wrote it up after he and I started talking when he and
> one of my clients got attacked by it.  He calls it the Bug-Travel
> attack, which I believe it it's official name.  He posted his original
> write-up to cobalt-security and Bruce Timberlake forwarded it to
> cobalt-users.

Excellent, thanks Jeff. I did indeed miss that post, now everything makes
sense. Thanks again.

Brandon