A note on vendor reaction speed to the e=3 problem

[Travis H.]

On 9/26/06, Richard Salz <rsalz at us.ibm.com> wrote:
> Really, what?  There are things it doesn't do, but since it's only a
> packaging format that's a good thing.

Though there are unshar tools, typically people run it as input to /bin/sh,
usually without reading through it (and given the level of obfuscation sh
offers, it's not clear that you couldn't sneak something through even if
the person skims it).
-- 
Enhance your calm, brother; it's just ones and zeroes.
Unix "guru" for rent or hire -><- http://www.lightconsulting.com/~travis/
GPG fingerprint: 9D3F 395A DAC5 5CCC 9066  151D 0A6B 4098 0C55 1484

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com