Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")

["Martin Johns" <martin.johns@gmail.com>]

I have just been told that the real name of "timeless" is Josh Soref
(apparently a well-known Mozilla contributor). I made the same wrong
reference in my post on breaking DNS-pinning
(http://shampoo.antville.org/stories/1451301).

Best,
Martin


On 12/25/06, Amit Klein <aksecurity@gmail.com> wrote:
> Hi
>
> In the writeup named "Host header cannot be trusted as an anti anti
> DNS-pinning measure" (submitted September 7th, 2006) I erroneously
> attributed one of the references to the wrong person. The correct text
> should read:
>
> [1] "DNS: Spoofing and Pinning", by "timeless", September 12th, 2003 (or
> earlier)
> http://viper.haque.net/~timeless/blog/11/
>
> The original (wrong) text attributed this reference to Mohammad A.
> Haque, who owns the viper.haque.net website, but (in my current
> understanding) did not write the referenced text (my understanding now
> is that http://viper.haque.net/~timeless/ actually belongs to
> "timeless", a different individual).
>
> This mistake also occurred in a response I wrote to a thread "Re: [WEB
> SECURITY] Detecting, Analyzing, and Exploiting Intranet Applications
> using JavaScript" in the WebSecurity mailing list
> (http://www.webappsec.org/lists/websecurity/archive/2006-07/msg00090.html).
>
> I'm sorry for the confusion.
> -Amit

--
Martin Johns
http://www.martinjohns.com