mailing list archives
Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")
From: "Martin Johns" <martin.johns () gmail com>
Date: Tue, 26 Dec 2006 21:45:41 +0100
I have just been told that the real name of "timeless" is Josh Soref
(apparently a well-known Mozilla contributor). I made the same wrong
reference in my post on breaking DNS-pinning
On 12/25/06, Amit Klein <aksecurity () gmail com> wrote:
In the writeup named "Host header cannot be trusted as an anti anti
DNS-pinning measure" (submitted September 7th, 2006) I erroneously
attributed one of the references to the wrong person. The correct text
 "DNS: Spoofing and Pinning", by "timeless", September 12th, 2003 (or
The original (wrong) text attributed this reference to Mohammad A.
Haque, who owns the viper.haque.net website, but (in my current
understanding) did not write the referenced text (my understanding now
is that http://viper.haque.net/~timeless/ actually belongs to
"timeless", a different individual).
This mistake also occurred in a response I wrote to a thread "Re: [WEB
SECURITY] Detecting, Analyzing, and Exploiting Intranet Applications
I'm sorry for the confusion.