How about something as simple as script file or executable owned by root, but writable by anyone? Change the contents, and the next time it gets used by a priviliged user, UR 0w3n3d!
Files like that should be rare, but have you done a full security audit to make sure none exist? Never underestimate what sneaky software can do once it gets a foothold.
Re:"Canada's national newspaper?"
on
Linux in Canada
·
· Score: 1
Calling the Globe and Mail "Canada's national newspaper" is very amusing to the rest of Canada. More properly, it's Toronto's national newspaper.
I want a simulator where I can drop (small ones) on a particular location, like the one that showed the effects of a nuclear blast on a map. It was always fun to plug in the location of a spammer's house and see the results of 10 megatons of "spoil his day".
Yep, that's what I thought too. Too bad I noticed the story after the recent Ringworld article, but through the miracle of retro-sig-modification, it's always been my sig (since Tuesday).;^)
There's been a number of actresses who have had their breasts insured, starting with Jane Mansfield, on through Jennifer Lopez for a billion. (Including her ass. Okay, but not a billion dollars okay.)
For unknown lengths of forever. If they control the servers and protocol, can't they just switch that off at any time? (Didn't Kazaa suddenly change protocols to freeze out some compatable apps once?)
I think the Night of the Living Darl, er, Dead zombies were space-infection zombies. (The $2 Zombie night at The Pioneer always worked for me. In the morning, something had definitely bitten me!)
Gee wow, you're right! They're ROM images. It's too bad that you weren't around when I worked for an arcade company. We'd say we were "burning" new versions of the EPROMs all time, and we usually weren't literally burning the EPROMs. You could have corrected us!
The question is, did they do that with all their offerings? The article mentions Gauntlet II which they offered, and then withdrew, but still claim that the copies they sold are legit. Hmm?
Are they really getting licences in all cases, or with some are they offering them and sort of looking for the owner (and hoping they don't find them)--meanwhile driving people away from picking them up as abandonware?
How about the number getting out through various ways to some kid that signs up? (I understand that dumpster diving is less common these days, but..) Unless you can tie the card to the card owner's IP address you might suspect consumer fraud statistically, but I doubt every chargeback is fraud by the card holder.
Around the house? How about any of the companies that you've ever used it with in the past. The dot.bomb where you bought something five years ago? Someone ended up with their records. Another company? They left their directories wide open one week when Haxor-X got in. Or the one where an ex-employee left with data.
Most of the time the sites in question have detailed logs of this guys IP and such, but it doesn't matter.
Yeah? And how did they verify that the person with the IP addres who gave the card number was actually the owner of the card?
Cry me a river. If they accept unverified card numbers without any kind of confirmation, they're going to have a lot of chargebacks. If they don't like, they shouldn't use credit cards for payment.
Slashdot Mirror
I hope you "bounce" the spam to someone who thinks exactly like you.
You should be safe from one-upping until someone from NASA/JPL posts... :^)
Files like that should be rare, but have you done a full security audit to make sure none exist? Never underestimate what sneaky software can do once it gets a foothold.
Calling the Globe and Mail "Canada's national newspaper" is very amusing to the rest of Canada. More properly, it's Toronto's national newspaper.
I want a simulator where I can drop (small ones) on a particular location, like the one that showed the effects of a nuclear blast on a map. It was always fun to plug in the location of a spammer's house and see the results of 10 megatons of "spoil his day".
Yep, that's what I thought too. Too bad I noticed the story after the recent Ringworld article, but through the miracle of retro-sig-modification, it's always been my sig (since Tuesday). ;^)
So they have a covert communication channel to my /dev/null? I knew it! I'd better buy that software that promises to shred everything stored there.
There's been a number of actresses who have had their breasts insured, starting with Jane Mansfield, on through Jennifer Lopez for a billion. (Including her ass. Okay, but not a billion dollars okay.)
Can you imagine the call to the insurance company to get a policy? I don't think "saving a bundle" is one of the options.
I tell you, the frame rate on games was hell! (As well as being bad for trees.)
For unknown lengths of forever. If they control the servers and protocol, can't they just switch that off at any time? (Didn't Kazaa suddenly change protocols to freeze out some compatable apps once?)
Since this looks like another proprietary VOIP protocol, if the other person doesn't know that it's VOIP on a PocketPC .. well ..
Do these apps use any standards like RFC3261 SIP, connect to VoiceXML, etc, or all they all using some kind of closed proprietary protocol?
I think the Night of the Living Darl, er, Dead zombies were space-infection zombies. (The $2 Zombie night at The Pioneer always worked for me. In the morning, something had definitely bitten me!)
He was too busy rhyming Castlereagh with survey to worry about spelling. :^P
What do you mean imagine? Isn't that what Darl's doing right now?
Gee wow, you're right! They're ROM images. It's too bad that you weren't around when I worked for an arcade company. We'd say we were "burning" new versions of the EPROMs all time, and we usually weren't literally burning the EPROMs. You could have corrected us!
Are they really getting licences in all cases, or with some are they offering them and sort of looking for the owner (and hoping they don't find them)--meanwhile driving people away from picking them up as abandonware?
How about the number getting out through various ways to some kid that signs up? (I understand that dumpster diving is less common these days, but..) Unless you can tie the card to the card owner's IP address you might suspect consumer fraud statistically, but I doubt every chargeback is fraud by the card holder.
There's nothing secure about a card card number.
"The sheer size of this creature humbles us," U.N. Secretary-General Kofi Annan said.
Yeah? And how did they verify that the person with the IP addres who gave the card number was actually the owner of the card?
Cry me a river. If they accept unverified card numbers without any kind of confirmation, they're going to have a lot of chargebacks. If they don't like, they shouldn't use credit cards for payment.
What makes you think that all the money spent in those states had much to do with engineering or physics? ;^)
So there, pphhhfft!