Open-source bugs undermine digital signatures

You mean: the WMF vulnerability that a third-party programmer released an unofficial patch for (without access to the source code) because MS couldn't be bothered to release a patch outside their monthly PMS (Patch My S#!t) cycle?

One gpg problem was found on Feb 15 and patched on Feb 15, and the other was found - during ongoing testing of the fisrt one - on March 9 at 8:00 pm and patched on March 10. Nice work!!

P.S. I just patched my Linux, FreeBSD, and Windows systems without any problems. My existing signatures, public/private keys and encrypted/signed files all work just fine!!; Posted by: Hugh Jass Posted on: 03/11/06 You are currently: a Guest | Members login | Terms of Use

Reply to Story Reply to Message

Subscribe to this discussion via Email or RSS

Blindness? Tony Agudo | 03/11/06

You mean Hugh Jass | 03/11/06

Yep, that's the one! Tony Agudo | 03/11/06

Yep hawkeyeaz1 | 03/13/06

digital signatures ipfresh@... | 03/12/06

The most important thing is Boot_Agnostic | 03/13/06

After the patch hawkeyeaz1 | 03/13/06

Ships with? cloder | 03/16/06

What do you think?

Here to help you with your Document Management Needs
Check out Doc’s Blog on ZDNet
Help your company, help the earth I want to share with you the Environmental Defense Fund Paper Calculator, which allows you to gauge your organization's environmental impact.
Which is Greener: Paper or Digital? The Answer May Surprise You Anything we can do to reduce paper consumption is good. But what about the impact of digital waste?
Produced by
ZDNet and