Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Detecting the Software Switcheroo
Jon Lasser, 2001-12-19

It may be the next big thing in Trojan horse attacks: swapping bad code for good code in transit. Fortunately, there's a defense

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Detecting the Software Switcheroo 2001-12-20
Andy Steingruebl
Verifying signatures will require that either:
1. you already have the public key to check the signature.
or
2. you can trust the network to get you the right public key.

#2 requires #1 for the keyserver, and requires that keyservers sign their requests for keys. To the best of my knowledge t...

[ more ]  





 

Privacy Statement
Copyright 2008, SecurityFocus