Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Marco Moock
Re: Telnetd Vulnerability Report
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Wed, 25 Feb 2026 21:03:54 +0100 Am 25.02.2026 um 20:47:09 Uhr schrieb Steffen Nurpmeso: It seems to me one reason to use telnet(1) arises from the fact that there is no nc(1) around. busybox has one, but it is not feature rich enough. And the one of LibreSSL, which is, as it says, a swiss-army-knife, is very often not available at all. IIRC this issue is only about the telnetd telnet server daemon, not the client.
Re: Re: Telnetd Vulnerability Report
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Wed, 25 Feb 2026 08:42:35 +0100 On 24.02.2026 05:05 kf503bla () duck com kf503bla () duck com wrote: Who uses telnet anyway? It's deprecated. Everyone uses ssh for any kind of remote access. In certain situations telnet is still being used, because it is supported on a wide range of systems, regardless of key (exchange) algorithms or hash algorithms.
Re: LibreOffice puts searched text into the PRIMARY selection (Linux, X11)
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Wed, 10 Dec 2025 17:08:42 +0100 Am 10.12.2025 um 12:35:17 Uhr schrieb Vincent Lefevre: Under Linux X11, LibreOffice (Writer, Calc, Draw...) silently puts searched text into the PRIMARY selection when a search is active and its window gets the focus.
Re: CVE program averts swift end
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Wed, 16 Apr 2025 21:05:35 +0200 Am 16.04.2025 um 16:57:20 Uhr schrieb Rolf Reintjes: any comments on this?: https://www.csoonline.com/article/3963190/cve-program-faces-swift-end-after-dhs-fails-to-renew-contract-leaving-security-flaw-tracking-in-limbo.html I don't see a real use-case for such databases - especially if they consume that much money.
Re: feedback requested regarding deprecation of TLS 1.0/1.1
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Wed, 7 Aug 2024 21:08:40 +0200 Am Tue, 6 Aug 2024 14:48:14 -0400 schrieb Demi Marie Obenour <demi () invisiblethingslab com>: On Tue, Aug 06, 2024 at 05:12:32PM +0200, Marco Moock wrote: Am Tue, 6 Aug 2024 05:02:14 -0400 schrieb Neil Horman <nhorman () openssl org>: 1) Are distributions/users comfortable with this approach in the time frame proposed?
Re: feedback requested regarding deprecation of TLS 1.0/1.1
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Tue, 6 Aug 2024 19:15:04 +0200 Am 06.08.2024 um 17:34:44 Uhr schrieb Stuart Henderson: On 2024/08/06 17:12, Marco Moock wrote: Is it reasonable to output that on STDERR any time those protocols are used? From a library?! openssl is also sometimes used as a normal binary to test connections etc.
Re: feedback requested regarding deprecation of TLS 1.0/1.1
oss-sec mailing list archives From: Marco Moock <mm () dorfdsl de> Date: Tue, 6 Aug 2024 17:12:32 +0200 Am Tue, 6 Aug 2024 05:02:14 -0400 schrieb Neil Horman <nhorman () openssl org>: 1) Are distributions/users comfortable with this approach in the time frame proposed? As a user, this is acceptable for me, but I know there are still machines outside that only offer such old versions. Some of them can't be upgraded easily because the vendor doesn't provide any new versions.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Marco
Contact Marco, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack