Re:Zero-day OpenSSH vulnerability?
by st3fan on Monday July 20, 2009 @11:29AM
(#714532)
People seem to agree that it is 'too good to be true' so that is must be a hoax. I'm still a little worried and I think it is good to have some IP based access lists ready when things become more clear in the coming days.
[ Parent
| on HN ]
Not just a hoax, they're out to discredit anti-sec. Anti-sec doesn't use gmail, they always sign their posts, and they certainly do not issue warnings.
Anti-sec with a ssh 0-day would've tripped over itself rm'ing boxes left and right. It's like Bin Laden warning people he is in California and would be causing great mayhem, Real Soon Now.
Anti-sec (with their real email address) could make a counter statement then?
Maybe they should hold a press conference?
1) The more we talk about anti-sec the bigger anti-sec gets.
2) These guys are not exactly teen pop idols, ever ready to dispute a rumor or a tabloid story; there is a good bounty on their necks and they seem to have "better" things to do.
3) The more security mailinglists and other communication venues get trolled and haoxed, the more the security industry looks like the joke it is, and that would make anti-sec kinda happy.
Now, can we please flag the "story"?
yeh smells like a hoax to me too.
Re:Zero-day OpenSSH vulnerability?
by JeremyChase on Monday July 20, 2009 @11:51AM
(#714571)
Flag it.
It's still interesting (right?)
Re:Zero-day OpenSSH vulnerability?
by JeremyChase on Monday July 20, 2009 @12:03PM
(#714591)
If they had any evidence it would be one thing, but this is just fear mongering.