Despite the BUG_ON and comment suggesting these lengths have been validated, I don’t think this is actually the case – it looks like these fields are validated for outbound data, but I see no validation for inbound data (unless I’m mistaken, which is entirely possible). If this is the case, this can allow remote attackers to cause controllable heap corruption. I’d appreciate it if someone who knows this protocol better than I do took a look at this and implemented appropriate error handling if it needs it.
This just goes to show that today if you spend enough time randomly source auditing, fuzz testing, and reverse engineering it could turn into an exploit in the strangest of places…and if you root a system still connected to a VAX you are bound to find something interesting.
DEC VAX SOFTWARE MAINTENANCE [for the F-100 Engine on the F-15/F-16]
Solicitation Number: FA8126-11-Q-0171
Agency: Department of the Air Force
Office: Air Force Materiel Command
Location: Tinker OC-ALC – (Central Contracting)
[…]
Added: Apr 07, 2011 4:16 pm
The US government has announced it is replacing the infamous pyramid of food with a pie. Oh, wait, I mean a plate cut up into pieces that look like pie.
First, what? Switch from pie to milk? I just adopted the new pie diet and already they are asking me to switch?
Second, if I’m going to drink any milk at all, I’m going to drink healthy milk — whole raw milk — and not some rehydrated reconstituted dried lint from dirty socks blue-tinted water low-fat milk substitute. I’d drink camel milk long before I would agree to poison myself with the stuff left over when you remove the milk (fat) from milk.
Research clearly shows [http://www.ncbi.nlm.nih.gov/pubmed/18831752] that whole milk causes more lean body mass gains than non fat milk. Which proves fat doesn’t make you fat [http://stronglifts.com/the-4-most-popular-fat-myths-debunked/]. Excess calories do. As long as you have a caloric deficit, it doesn’t matter if you drink non fat or whole milk.
Ottenheimer estimated that Michaels was likely facing tens of thousands or even hundreds of thousands of dollars in costs related to replacing the 7,200 PIN pads, including training employees to regularly check that the equipment has not been compromised.
I’m glad they included the security procedures comment, although I sound more conservative than I realised at the time. The cost breakdown of their upgrade is affected by many factors such as planned depreciation of existing equipment, logistics and shipping, installation and configuration of the hardware/software.
But PIN pad security and compliance is not just about the technology. Michaels management also will have to update and test their procedures and provide company-wide training to prevent or detect further compromise. That is why a new replacement estimate could easily reach into the hundreds of thousands, unless it already was in plan and budget, as I explained previously.
Some go for the Lulz, but also there are sites for LAFS (Least Authority File System). Here are two interactive ones based on the Tahoe-LAFS
Tahoe Storage Illustration is a simple javascript page; it lets you enter data, pseudo-encrypt it, distribute it, and then wipe out cells of it to see how data could survive a failure.
Neither demonstration addresses the giant elephant of storing data with a provider — managing authorisation and authentication — but the latter site comes with warnings.
This gateway is not secure! Please set up your own gateway
