Debunking the WMF backdoor

Debunking the WMF backdoor
Thomas C. Greene, 2006-01-23

Claims that the WMF vulnerability was an intentional backdoor into Windows systems makes for an interesting conspiracy theory, but doesn't fit with the facts.

Expand all | Post comment

Debunking the WMF backdoor 2006-01-23
Rick Luther

Finally Someone said it... 2006-01-24
Jon Hash

Debunking the WMF backdoor 2006-01-24
assurbanipal (1 replies)

Re: Debunking the WMF backdoor 2006-01-30
Alexey Vesnin

Debunking the WMF backdoor 2006-01-24
Anonymous

Debunking the WMF backdoor 2006-01-24
ScuzzMonkey (1 replies)

Re: Debunking the WMF backdoor 2006-01-25
Ikester

Debunking the WMF backdoor 2006-01-24
ScuzzMonkey (2 replies)

Re: Debunking the WMF backdoor 2006-01-24
Kelly Martin (1 replies)

Re: Re: Debunking the WMF backdoor 2006-01-25
Steve Bostedor

Re: Debunking the WMF backdoor 2006-01-25
elMurado

Debunking the WMF backdoor 2006-01-25
Anonymous (1 replies)

Re: Debunking the WMF backdoor 2006-01-27
Penguinisto

Oy, Vey... got enough tinfoil packed tightly on that skull of yours?

The most likely explanation for leaving it open is legacy support for 3rd-party programs that handle WMF files - _if_ there was any decision made by MSFT coders on SetAbortProc() at all.

The MSFT/DSA key deal you referred to required that the gov't had posession of / access to the encrypted drive in question, and would've been positively useless for building backdoors and rootkits in and of itself.

FFS...

/P

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/382/33046#33046

Mr. Greene, I wouldn't be surprised if you get sued for this. 2006-01-25
Roger (2 replies)

Re: Mr. Greene, I wouldn't be surprised if you get sued for this. 2006-01-27
Anonymous

Re: Mr. Greene, I wouldn't be surprised if you get sued for this. 2006-01-30
Anonymous (1 replies)

Re: Re: Mr. Greene, I wouldn't be surprised if you get sued for this. 2006-02-01
Roger

Gibson is an idiot 2006-02-09
Anonymous

Your mistake 2006-05-30
henriko