[TriLUG] OT: www.hexblog.com - a fix for the WMF vulernability.
Tanner Lovelace
clubjuggler at gmail.com
Wed Jan 4 17:19:09 EST 2006
On 1/4/06, Rick DeNatale <rick.denatale at gmail.com> wrote:
> On 1/4/06, Tanner Lovelace <clubjuggler at gmail.com> wrote:
> > On 1/4/06, Rick DeNatale <rick.denatale at gmail.com> wrote:
> > > It's been a few weeks since I read the BBV report with the details of
> > > the hack, so I just re-scanned it.
> > >
> > > Actually, the exploit DIDN'T involve or require changes to the
> > > accubasic interpreter. The full details are available here:
>
> > Um, isn't that exactly what I said? I didn't say it required changes
> > to the interpreter, I said he preloaded postive and negative votes
> > on the card.
>
> Not to stir things up any more than we have already, but what you said
> exactly was:
>
> > What happened here was that the accubasic INTERPRETER was
> > programmed with 5 positive and 5 negative votes and so when they ran
> > the test to make sure there were 0 votes before starting the test, it did,
> > indeed, say that there were zero votes.
>
> Of course I emphasized the word INTERPRETER.
>
> Just trying to keep earning those frequent pedant points. <G>
I don't know about you, Rick, but I've always used the phrase
"programming an interpreter" to indicate writing a program for
an interpreter because to have it mean actually writing the interpreter
itself would be silly.
Cheers,
Tanner
--
Tanner Lovelace
clubjuggler at gmail dot com
http://wtl.wayfarer.org/
(fieldless) In fess two roundels in pale, a billet fesswise and an
increscent, all sable.
More information about the TriLUG
mailing list