verifying inline signatures

Igor Gueths igueths at lava-net.com
Wed Jan 25 20:00:23 EST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Yeah I remember an exploit a while back that allowed one to traverse the directory tree.
On Wed, Jan 25, 2006 at 05:39:44PM -0500, Garrett Klein wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> I just had one of those major epiphany, "Ah-ha!" moments. I'm thinking that there was some sort of mailman upgrade/patch, most likely for some really critical exploit, that everyone upgraded their version too. That would explain inline signatures not verifying on other lists, as well as why messages not going through any mailing lists verify just fine.
> 
> Garrett
> 
> On Wed, Jan 25, 2006 at 01:39:36PM -0500, Charles Hallenbeck wrote:
> > Hi people,
> > 
> > I have experienced the same failure to verify inline signatures on signed messages on the list as others have 
> > experienced. Neither my Mutt nor my gnupg have changed to account for this. Nor my exim4 either, for that matter.
> > 
> > I have just implemented encryption on my outgoing mail, and it works, as you can see. except that verifying the 
> > signatures on received mail still fails.
> > 
> > HOWEVER -- When I send myself mail to an alternative email address I have available, not going through any list, the 
> > verification of my signed messages works fine, just as it used to on the list. 
> > 
> > So what does that mean? Has the list software changed? Has anyone solved this problem?
> > -- 
> > The Moon is Waning Crescent (19% of Full)
> > But you can still get downloads from http://www.mhcable.com/~chuckh
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup at braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> > 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> 
> iQIVAwUBQ9f+L/Q3GgYHRr/HAQqG7Q//S9cd1Hfyo7otPbnPMjwPa1JM6WGfI5w0
> hcmJxzNTzp+xPEWJULardQxD0IHtIYce1CcBuzcDwFP0vofCGchYsrILy4EThrZo
> eaAWtffJtffHV3J8AuZpqTVLfuviPf8nU+A+x57MXaEXZRWSNQyJusmR5W8d3nJ5
> dXgoX1Agxm2U/OBPvOwY5XBuSzEm8vtrrE4ofAJJOKtyLwF4mOhG0Qso8W/RGKvn
> 9O/EqscV0j2nLOYdXDjAF45fsR53gu4XqEnInUqVnG666vAAjEkHLq95MLHqbwFU
> UjXYCWkgdlfqSL2MN43QaDqIe1gWPvlz9P5V4LX0ejt8AYE5HgWM2kxDRFnen7mG
> 8QSl4RUSK6sFdn/FDmATHOhEvcAhPDgWhrNBHWz0cUa9rXsB99e1ObM88bS0IZe4
> eGCljlfcJSWgSq8wxUk+3uLTXnY1Ey2ki8owAB20E2r9jgxco67Oa33alkIoCBHW
> 40IDeH2PUuWKVDosXNuk5NHwNRX+9v7eZ+IrZ6Gkgvh6aSK6rkLc33Q8tOzEFviX
> oqHdEYGdcbo5ZsLYaw7kXRiAR3vspWOuiXDmo/TDH33JAX/xCCK4fYr/Xxuc77SN
> uWJFTbh7oOSxNQCUufvNT1wXzn1mqu5Nsd6DkjO3/WWsT+9e2MNXFcOlV/BDcdpH
> zDxVsO24+KE=
> =3deJ
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Speakup mailing list
> Speakup at braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

- -- 
Any society that would give up a little liberty to gain a little
   security will deserve neither and lose both.
- -- Benjamin Franklin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
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=rO2H
-----END PGP SIGNATURE-----




More information about the Speakup mailing list