Comment BOFH is a privelege (Score 1) 902
If you can pull it off, you deserve to be as BOFHy as possible.
If you can pull it off, you deserve to be as BOFHy as possible.
Unless the explanation itself is emailed to them and contains a secondary attack... if they really did it with XSS as the ZDNet article states, that's a reasonable assumption.
But we may be bordering on ridiculous.
ZDnet Article: http://blogs.zdnet.com/security/?p=3514
One of the hackers posted an uninformative response on his blog: http://skeptikal.org/2009/06/strongwebmail-incident.html
Was there doubt as to whether humans practiced cannibalism? It's well documented in Africa and a variety of island nations. I personally know people whose parents did so.
1) You make a purchase, inject javascript into your address. The administrator goes to the website to print shipping labels. Now you control the administrator.
2) You log in. Later that day, you're visiting evil.com, which loads the site in the background, with payload, and slurps data off of it.
Fortunately, I do all my cyberbullying from a sockpuppet blog.
A much more serious issue- in the control panel for their web application scanning service was published yesterday.
http://skeptikal.org/2009/05/epic-failure-from-mcafee.html
This XSS is cool, but it's not news. I've been documenting McAfee web vulnerabilities for a year now. Rest assured, there are many more, some of which will be published later this week.
Nah, you're only behind one proxy, and I run it.
Yes, and you're a moron too.
...and it will instead spend most of its time trolling slashdot for lulz.
I have a strong suspcion that AI is already around and it:
is nihlist.
spends time on 4chan.
...
?
You're right, but the shitcock thing is the unspoken corollary.
As a security guy, I can testify that no matter how structured you intend your code to be, it eventually, through poor maintenance, poor implementation, and poor design, becomes purposeless and random.
Nihilism fits right into my line of work.
Anti-virus might be dead, but the AV companies threaten me every time I come close to the box.
He has not acquired a fortune; the fortune has acquired him. -- Bion