Slashdot Mirror
WMF Vulnerability is an Intentional Backdoor?
An anonymous reader writes "Steve Gibson alleges that the WMF vulnerability in Windows was neither a bug, nor a feature designed without security in mind, but was actually an intentionally placed backdoor. In a more detailed explanation, Gibson explains that the way SetAbortProc works in metafiles does not bear even the slightest resemblance to the way it works when used by a program while printing. Based on the information presented, it really does look like an intentional backdoor." There's a transcript available of the 'Security Now!' podcast where Gibson discusses this.
You can't Hack My Gibson.
Well, how else is the NSA going to fight terrorism?
How about a link to information on the "other" intentional back doors that exist?
*looks at clipboard*
Ok Goatse linkers, thats your cue.
Where does the school board find them and why do they keep sending them to ME?
"Hack the Gibson!"
I can't believe it, Jim. That girl's standing over there listening and you're telling him about our back doors?
You guys are so dumb, I'd go straight through Falken's Maze.
I just hope David Lightman isn't reading this... we'd only have a few days until it was all over for us...
Dedicated Cthulhu Cultist since 4523 BC.
That seems like design
Intelligent Design?
Sure fine... Behold the Power of Google!
Have Fun.
Navicula hydraulica plena anguilarum est. Omnes castelli tuus nostri sunt. Ed elli avea del cul fatto trombetta.
If it is intentional, I don't see how it possibly got past the Microsoft Security Engineers.
He who knows best knows how little he knows. - Thomas Jefferson
To trigger the exploit, the length must be set to 1. Not 2, 3, 0, or some other equally invalid value, but only the value "1".
And the counting of the length shall be ONE!
Sorry, couldn’t resist.
Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
Most backdoor hole problems can be patched with the application (of) Preperation H.
posting a URL on /. causes the server to crash?
Yeah, right... trust the Chinese government to uphold our privacy rights. Anyone who runs Red Flag Linux voluntarily should have their head examined. I think Gentoo might be a safe bet...
"I like systems, their application excepted", George Sand (French)
You mean the urban legend about an NSA backdoor? There was *never* any evidence of a backdoor, only a registry key named "NSAKEY" and a bunch of paranoid fantasy. Because, you know, if the NSA did have a secret backdoor, they'd make sure is was called NSAKEY, in case they forgot where it was, or something.
Socialism: a lie told by totalitarians and believed by fools.
I presume you are willing to show the details of your extensive research that determined this factoid....
Something like this?
(=()=)I work at Microsoft, and know for a fact the exploit was put in for the purpose of determining who looks at illegal pr0n on Usenet. Ever wonder why the government dropped all the lawsuits against us? This kind of behind-the-scenes cooperation with the federal government is why.
where you waif that right.
I really think kate moss doesn't have anything to do with this, despite the recent press tizzy.
music lover since 1969
Never ascribe to malice that which is adequately explained by incompetence. Napoleon Bonaparte
better is the enemy of good