[TriLUG] OT: www.hexblog.com - a fix for the WMF vulernability.

Rick DeNatale rick.denatale at gmail.com
Wed Jan 4 16:20:24 EST 2006


On 1/4/06, Tanner Lovelace <clubjuggler at gmail.com> wrote:
> On 1/4/06, Rick DeNatale <rick.denatale at gmail.com> wrote:
> > It's been a few weeks since I read the BBV report with the details of
> > the hack, so I just re-scanned it.
> >
> > Actually, the exploit DIDN'T involve or require changes to the
> > accubasic interpreter.  The full details are available here:

> Um, isn't that exactly what I said?  I didn't say it required changes
> to the interpreter, I said he preloaded postive and negative votes
> on the card.

Not to stir things up any more than we have already, but what you said
exactly was:

> What happened here was that the accubasic INTERPRETER was
> programmed with 5 positive and 5 negative votes and so when they ran
> the test to make sure there were 0 votes before starting the test, it did,
> indeed, say  that there were zero votes.

Of course I emphasized the word INTERPRETER.

Just trying to keep earning those frequent pedant points. <G>

--
Rick DeNatale

Visit the Project Mercury Wiki Site
http://www.mercuryspacecraft.com/



More information about the TriLUG mailing list