Exploit Found in Seti@Home

Jamie noted that an Exploit was found in Seti@Home and there is code exploiting the hole actually running about in the wild. Patches are available for those of you not interested in running a public warez server or DoS client ;)

Comments

Re:Firings...

[fadeaway]

Why is there always an assumption that exploits=firings? If it was intentionally added, yes, but if it's an honest mistake why do heads have to roll?

Coders make mistakes. That's why they put a backspace key on keyboards.

Manager's case of "told me so!"

[Chester K]

This is the reason employers have problems when their employees run Seti@Home (and indeed, any unauthorized software) on their machines.

As an IT professional, you talk and talk and talk and talk trying to warn your superiors of the danger of running unnecessary network services -- why you can't just open the firewall wide up to let them use their proprietary stock-tracking application; hell, why you even have a firewall in the first place.

And then Seti@Home, the ultimate nonessential network service, comes along and validates everything you've been saying. But you're running it anyway, because it's "cool". And now your network is compromised.

Should have taken your own advice.