Comment Re:Hu? (Score 1) 193
ZDnet Article: http://blogs.zdnet.com/security/?p=3514
One of the hackers posted an uninformative response on his blog: http://skeptikal.org/2009/06/strongwebmail-incident.html
ZDnet Article: http://blogs.zdnet.com/security/?p=3514
One of the hackers posted an uninformative response on his blog: http://skeptikal.org/2009/06/strongwebmail-incident.html
Was there doubt as to whether humans practiced cannibalism? It's well documented in Africa and a variety of island nations. I personally know people whose parents did so.
1) You make a purchase, inject javascript into your address. The administrator goes to the website to print shipping labels. Now you control the administrator.
2) You log in. Later that day, you're visiting evil.com, which loads the site in the background, with payload, and slurps data off of it.
Fortunately, I do all my cyberbullying from a sockpuppet blog.
A much more serious issue- in the control panel for their web application scanning service was published yesterday.
http://skeptikal.org/2009/05/epic-failure-from-mcafee.html
This XSS is cool, but it's not news. I've been documenting McAfee web vulnerabilities for a year now. Rest assured, there are many more, some of which will be published later this week.
Nah, you're only behind one proxy, and I run it.
Yes, and you're a moron too.
...and it will instead spend most of its time trolling slashdot for lulz.
I have a strong suspcion that AI is already around and it:
is nihlist.
spends time on 4chan.
...
?
You're right, but the shitcock thing is the unspoken corollary.
As a security guy, I can testify that no matter how structured you intend your code to be, it eventually, through poor maintenance, poor implementation, and poor design, becomes purposeless and random.
Nihilism fits right into my line of work.
Anti-virus might be dead, but the AV companies threaten me every time I come close to the box.
Are you kidding? I've SEEN my perl code. I don't want to be stuck maintaining it.
This may be the first time I've ever wanted to do so, but I'd mod this Anonymous Coward up if I had points.
And I'm even a fan of PHP
Get hold of portable property. -- Charles Dickens, "Great Expectations"