Re: Hiding Backdoors in plain sight, again

[Ariel Waissbein <ariel.waissbein () coresecurity com>]

On 22/7/11 12:39 PM, Valdis.Kletnieks () vt edu wrote:
> On Fri, 22 Jul 2011 12:17:33 -0300, CoreTex Team said:
>
> > Finding: Scoring Table       Placebo Backdoored
> > Correctly Identified 5 (voted as placebo)    2 (voted as backdoored)
> > Incorrectly Identified       -1 (voted as backdoored)        -12 (voted as placebo)
>
> How many points does somebody get for managing to exploit a placebo? :)

Vladis,

The rules are clear. If you say you find a backdoor in a placebo, it
does not matter if it has a backdoor or not, you get -1 points. We
cannot guarantee that a program will be non-vulnerable :)

On the other hand, if you do: then shoot us an email at info [ at:]
backdoohiding and we will reward the first one to do it!

The CoreTex team

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/