[ntp:security] R7-2014-12: PGP key sought for security at ntp.org

HD Moore HD_Moore at rapid7.com
Mon Aug 4 17:12:17 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Danny,

I have been in touch with Harlan and will provide both yourself and Harlan with an updated copy of the advisory.

Tod will be traveling this week, so feel free to ping me directly if you have any questions.

- -HD

> -----Original Message-----
> From: Danny Mayer [mailto:mayer at ntp.org]
> Sent: Monday, August 4, 2014 8:32 AM
> To: Tod Beardsley; security at ntp.org
> Cc: security
> Subject: Re: [ntp:security] R7-2014-12: PGP key sought for security at ntp.org
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Tod,
>
> We don't have a separate overall PGP key for NTP. You can send it to
> me using the key below. I can forward it as necessary.
>
> Thanks,
> Danny
>
> On 6/20/2014 4:15 PM, Tod Beardsley wrote:
> > Hi Security --
> >
> > I am having trouble finding an appropriate PGP key to use to
> > communicate a recently discovered security vulnerability with the
> > reference implementation of NTP. Can you either suggest one, or let
> > me know if you're comfortable with clear text messaging of
> > sensitive information?
> >
> > Thanks!
> >
> > -- "Tod Beardsley" <todb at metasploit.com> Metasploit Engineering
> > Manager Cell: 512-438-9165 | Twitter: @todb | PGP 2048R/ADB9F193
> > This electronic message contains information which may be
> > confidential or privileged. The information is intended for the use
> > of the individual or entity named above. If you are not the
> > intended recipient, be aware that any disclosure, copying,
> > distribution or use of the contents of this information is
> > prohibited. If you have received this electronic transmission in
> > error, please notify us by e-mail at (postmaster at rapid7.com)
> > immediately.
> >
>
> - -----BEGIN PGP PUBLIC KEY BLOCK-----
> Version: GnuPG v1.4.11 (MingW32)
> Comment: GnuPT 2.7.6
>
> mQENBFPfikwBCADPue/qbUyfSmjEGUBA0LleE/QIH0OLlkTu33dPcBGqZOwg0YPj
> YEWUQYQVM8Xj+mQMcoy7MCZ2amcUPNCAmIQVzdag6pa3bF67mnCPBudZ1Da
> cmwVN
> jBD2ClHkAO/M+8uv07SU18WqFJMk+bDzr0Ik1XOyoGyz+NCUW2HTjX8oNVepLBe
> v
> 7ddGo2Xumk6hQzTeaYAE/bhClGCagPcbch8U5g0EOijLZmDikRkp4QjtDUQndkRA
> zU5lhoRUXCwi28/HUOnojIj4hMko00awu9z6QNFrSw/G+KzkAof7BZbL4X1Z+wpz
> kIKYlpOE102/6De5aSi40xgneDj8Sgnz+FwZABEBAAG0JkRhbm55IE1heWVyIChO
> VFAga2V5cykgPG1heWVyQG50cC5vcmc+iQE+BBMBAgAoBQJT34pMAhsjBQkJZg
> GA
> BgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRA4XWOHjaiZ2qE6B/9kobJERfko
> rDzX/1iM4xU0XXJrhmSefJt8H6rdEmE3wAzZy7pIqkJx+mVP9uex6Qoq8PcBSXqb
> G92ug/SK+K8at0ZatKciwxwrjA03MsVr3VVxvrWrwnDOP/nTok2fuPxOsMkyEKyF
> iRZPo94MeH5//REYJrT50rq1TW7BlS0cIeFrmkNn72iPL3Kn5qzFKPa328gBk+oF
> LGTZM//m5hkGfs7GBy5ZRwVkTSb2PbKN8WvCOhsECKRHUAa35ov1WWfkJZKCt5
> j9
> +pbQt97NlZf7TuAaCVcWsWpOqer7AldIpSGBP7kaVCb4v1WyUW/okJ/rkW2K2SM
> 8
> EtHPItgVjgN8uQENBFPfikwBCACvh3/4YJtP4bFoR7iRBdgnJdJF7LInY+9bY9bo
> syEmLnVKO56nS2o1jW9uT1FUEaFlxRLk50FL1U8S9vGS4duI/vmASADoQEnGJO0X
> 1JFNAnS6lnDsZtg3dygqYizLmhTdps8f86GPGkPOCdw+TPHEpobndx9enrnl4/OE
> VhMn4QbAVcc10oWLJARVRQdrU0N8SHI9Dk5+KFBj+/hQtirc+EZRVodfr7FMQkYk
> aTbsvRf25qWj3EHHJd5ymaq+ielWT99jPUntPatTHtV3tO2dninKe7y7mVjPj8qS
> w8mqz5eLQf3FAiwOB87hVAGZIzRbLHJBcvFpRo2APyOizSLDABEBAAGJASUEGAEC
> AA8FAlPfikwCGwwFCQlmAYAACgkQOF1jh42omdpsbQgArLD6yXzgwGlTvS7zdmL3
> 96I5mwFDxnY1FI84NGXWNlSo2Tf/5As6rf3nIWRGJqrTU54Sl/fan3C/Gj1+8An3
> Gerne+NKzc4y7LwMesyKGzQ5HdjgrcTOnztEJxRWg1AHPoU85igcxIj3cAhLDD9m
> ycAr2HSdxEo0d3pohiP6Y+fpFo1cIAUtdUzheBHifqTNLdk3m5LAZPPgCyIZFs16
> uZqrS09KVvNqkV4I/N5IQRzB5ZPW/66TG7rg55vtYPDvVcytEGvry1ZCqfvI6IJe
> UWMul9WBPL+00HYp8s7pPX3CClRW8bsaXVAOmOntjFkrB2fe9QMHkEenv3UjNA
> yo
> ZA==
> =N9XF
> - -----END PGP PUBLIC KEY BLOCK-----
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (MingW32)
> Comment: GnuPT 2.7.6
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQEcBAEBAgAGBQJT34szAAoJEDhdY4eNqJnar5AH/07x0g7sf6QOKCkRISRuNrBJ
> iPhfLivWaeXse1a6eBao9b8dTyWXw+0gW23ZmEebTR5zY8GkYGUKrovyc7UKaDJp
> 87Zp5RThKEHDNQB2MrLsvpt+kkdJVAS5GLVIk9ngT65vnGr1ihUwOEKN3IEA1BoS
> mMhKwiiuJyOrxAAiVTjNA1gTfR34AZKXYFsdQJMTrLSo8VmsWb92oac8vid5PWV+
> wevKpPNtEB6MTSf+VYioHBCfr1qKbZ2HMVhG0nxKbluHhfhtnkb1vJTtDKq1fnAr
> afZIoGmkC5T4wE0p8Gp/lxsKCHpBEgM9lAGKFpEY/3UqPq41yxUpe+mdb0Hw8G8
> =
> =GtvU
> -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: Outlook Privacy Plugin
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=xC2k
-----END PGP SIGNATURE-----
This electronic message contains information which may be confidential or privileged. The information is intended for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by e-mail at (postmaster at rapid7.com) immediately.



More information about the security mailing list