News for hackers. Stuff that matters.

A comment on Matasano hacked. A humbling lesson, even the pros are vulnerable..

Re:Matasano hacked. A humbling lesson, even the pros are vul... by hachiya on Saturday July 25, 2009 @08:20PM (#723871)
Since they are against disclosing vulnerabilities, it seems more likely that these intruders did not gain access through an unknown SSH exploit, but some other way. Once obtaining root, they could paste some proof of being on the system, and simply combine that with the top portion of their log which may be completely fabricated to appear as a 0-day exploit.

Again, if there really is a SSH 0-day, why is an anti-disclosure group revealing one exists?

[ Parent | on HN ]
Re:Matasano hacked. A humbling lesson, even the pros are vul... by devicenull on Monday July 27, 2009 @05:48PM (#726831)
Saying that there is a vulnerability is nowhere close to revealing it. For example, I can say that Windows has a vulnerability allowing me to crash the system. If you are a Microsoft developer, does that information help you track down the issue? Not in the least, as you don't have any idea where to look
[ Parent | on HN ]