Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Mother, May I?
Mark Rasch, 2008-01-23

"Mommy, can I have a cookie?"

Comments Mode:
Thanks Mark 2008-01-23
Andy S.
Mother, May I? 2008-01-23
Anonymous (1 replies)
Re: Mother, May I? 2008-01-24
Mark D. Rasch
You're overlooking some issues. 2008-01-23
Anonymous (2 replies)
Re: You're overlooking some issues. 2008-01-24
Mark D. Rasch
Mother, May I? 2008-01-23
Erik N
OS utilities and public "keys" 2008-01-23
Ole Juul (1 replies)
Re: OS utilities and public "keys" 2008-01-28
Mark D. Rasch (1 replies)
You note "ALL utilities, such as "host", have execute permission signs which tell you explicitly whether you can or cannot run them" and therein lies the problem. They tell you whether you CAN run them, but not whether you MAY. An unlocked or even open door says you CAN enter, but only infers whether you MAY. Do determine whether you may, you have to look at a lot of other factors - whose door, why is it open, why are you coming in, what did owner intend, what did you intend, why are you coming in.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/463/34891#34891
Be careful what you ask for 2008-01-23
overshoot
Mother, May I? 2008-01-24
Thomas Downing (1 replies)
Internet as Commons 2008-01-28
Mark D. Rasch (1 replies)
Re: Internet as Commons 2008-01-29
Jon Hash (1 replies)
Re: Re: Internet as Commons 2008-02-01
Mark D. Rasch
Mother, May I? 2008-01-24
stacy
Not much of a cheese shop, is it? 2008-01-24
Mitch Smith (2 replies)
Re: Not much of a cheese shop, is it? 2008-01-28
Mark D. Rasch (1 replies)
Mother, May I? 2008-01-27
Anonymous (1 replies)
Re: Mother, May I? 2008-02-01
Mark D. Rasch
Mother, May I browse your public server? 2008-01-28
Anonymous (1 replies)
It's Like a Phone Book 2008-01-30
danielc
Mother, May I? 2008-02-07
Victor (1 replies)
Re: Mother, May I? 2008-02-07
Mark D. Rasch







 

Privacy Statement
Copyright 2007, SecurityFocus