@tiraniddo @matthew_d_green Did you find the overflow in it's kernel extension too? It was another mknod(2) with a high-minor. Caught it '13
Even though my #truecrypt bugs weren't back doors it's clear that it was possible to sneak them past an audit 
-
-
Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
@tiraniddo wait. Why did you backdoor truecrypt???Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
@tiraniddo could SDV have caught either of these? Why the hell do they use VS2008 (no /analyze?) for kernel-mode code development??!? -
@ariccio I don't believe so but I've not run it. Certainly they should be running something to do static analysis. - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.