Re: Plain text password for Microsoft (icwip.dun)

From: hellNbak (hellnbakat_private)
Date: Tue Jul 09 2002 - 15:46:59 PDT

  • Next message: Brett Moore: "Windows fuzz - Following on."

    > It will prevent copyright abuse until broken.  How long does the average
    > anti-piracy scheme last?  And remember - you deploy this one, you're STUCK
    > with it because there's hardware involved.
    
    
    I totally agree with you.
    
    > All it takes is one good buffer overflow.  Like we haven't seen security bugs
    > in trusted, signed ActiveX controls and the like before.  I've seen almost
    > nothing that says that *exploits* will be any more difficult to carry out.
    
    From what I can tell from the little detail I have read is that the system
    at both a hardware and software level will not run any program that is not
    properly signed (or whatever).  So, in order to get your arbitrary code to
    run, you need to be sure that the system will trust it -- which adds a bit
    of complication to the whole process but definately doesn't make it
    impossible.
    
    
    -- 
    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    
    "I don't intend to offend, I offend with my intent"
    
    hellNbakat_private
    http://www.nmrc.org/~hellnbak
    
    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    



    This archive was generated by hypermail 2b30 : Tue Jul 09 2002 - 16:47:11 PDT