Slashdot Mirror
Microsoft Programming Contest Hacked and Defaced
davidmwilliams writes "Microsoft followed their major annual Tech-Ed event in Australia with a week-long programming contest called 'DevSta,' to find 'star developers.' While the quantity and quality of submissions suggest a poor turnout, it certainly caught the attention of at least two hackers who left their mark. Here is the low-down on the contest, what happened, by whom, and screen shots for posterity in case it's been fixed by the time you read this. And unless the volume of submissions increase dramatically within the next few hours, someone may be awarded an Xbox for doing nothing more than rewriting the Windows calculator as a .NET app."
Nooo.
This isn't news. If it were, it'd carry a headline like "Microsoft Programming Contest Security Thwarts Hackers" and be about how Microsoft employed some effective security measures without subjecting all applicants to activity-monitoring rootkit DRM and attendees to cavity-searches.
Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
Nobody wants an XBox that badly do they? :-)
If I had an Ass, I'd call it Fanny Bottom, then I could slap my Ass; Fanny Bottom, on the Arse.
So it's like all their other software then?
No folly is more costly than the folly of intolerant idealism. - Winston Churchill
They really shouldn't be running HTTP daemons without SELinux running. Such services are just too popular a target.
"Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
What about the guy who found a security hole on IIS and wrote and exploit for it? that sounds way cooler than rewriting calc.
--
Stay tuned for some shock and awe coming right up after this messages!
To me it would appear that someone submitted entries with an bogus title and accompanying description. Hacked? Hardly. What surprises me is that no one submitted Viagra programs with accompanying links in the description.
These aren't the droids you're looking for. Move along.
Anyone wonder why only some pissed off script kiddies are playing?
Engineering is the art of compromise.
If you want a prize, why not come up with a hack that releases OEMs from their contractual obligation to pre-load Windows? Or maybe a hack that dis-allows Microsoft from counting the sale of a Dell server with Linux installed as a sale of a Windows license. How about a hack that gives the ISO people a spine and some cojones?
Now, those would be worth a prize.
I speak from about 15 years experience at multiple companies and not bias that the more "Microsofty" the programmer is, the worse they are.
The current project I am on is full of the Microsoft way of doing things. And get this:
We have a Linux server and Windows client, and they designed a Windows Registry as an interface to the database on Linux. They are having piss-poor performance due to many design issues related to this thing. I should probably post it to Daily WTF. I mean WTF indeed.
Who wants to be a Microsoft Star!! Wooohoo!
They are. And don't call me Shirley.
Cheers,
"What in the name of Fats Waller is that?"
"A four-foot prune."
He clearly means Dentistry software. Manage the patient's records, search cavities...
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
In other news, Alanis Morissette is found posting on Slashdot under the name 'db32'.
HACKED BY BENJYMOUSE HACKED BY BENJYMOUSE HACKED BY BENJYMOUSE There, now I "hacked" slashdot the very same way. The "hacked" and "defaced" site is nothing more than submissions (like comments on slashdot) with "HACKED BY OVERLORD" text. No JavaScript injection, no SQL injection, no nothing. Some medias will go to any length to capture traffic. sheesh.
Reading slashdot one-liner: (irm http://rss.slashdot.org/Slashdot/slashdot).rdf.item | fl title,desc*