|
Kerberos Loophole May Close Around Microsoft's Neck |
|
|
|
Source: Industry Standard [Yahoo!] - Posted by LinuxSecurity.com Team
|
The implications of Microsoft's propreitary "extensions" to Kerberos could be pretty far-reaching. "As a legal wrangle develops over whether the Linux/open-source news Web site Slashdot.org can post messages containing what Microsoft calls a "trade secret," key members of the . . .
The implications of Microsoft's propreitary "extensions" to Kerberos could be pretty far-reaching. "As a legal wrangle develops over whether the Linux/open-source news Web site Slashdot.org can post messages containing what Microsoft calls a "trade secret," key members of the technical standards community have lost patience with the software giant's assertion of proprietary control over an open standard. At issue is a security protocol called Kerberos, a mechanism that enables secure identity authentication when users log on to a network. The version of Kerberos in Windows 2000 exploits a loophole in the Internet standard specification that was deliberately left open for customized versions."
Read this full article at Industry Standard [Yahoo!]
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
