OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-Disclosure] trust? - win2k source code tools

From: Alan.l1 (alan.list1ntlworld.com)
Date: Tue Feb 17 2004 - 05:44:20 CST


> found this interesting...
> iexpress.exe
> signcode.exe
> makecert.exe ( DigSig.dll )

It's not interesting or at least not to anyone who's played with
code-signing. Two of these utils are from an old SDK and iexpress is
probably the same as found in the IEAK.

> who would you like your package to be certified from today sir?
> \win2k\private\ispu\pkitrust\initpki\certs\

Any box running IE will have those (certs != private keys).

-A

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html