Mixed Messages / Re: F00FC7C8 Kills P5 AND Re: Major security flaw in Cybercash 2.1.2 (fwd)
Eric Cordian wrote:
In comp.sys.intel, the keeper of the Intel Secrets Website, rcollins@slip.net (Robert Collins) writes this absolutely amazing paragraph:
If nobody knew about this problem, nobody would be affected by it. No, I had no desire to publicize the bug.
Egads. Talk about "Security by Obscurity"!
Robert Hettinga wrote:
Subject: Major security flaw in Cybercash 2.1.2 (fwd)
CyberCash v. 2.1.2 has a major security flaw that causes all credit card information processed by the server to be logged in a file with world-readable permissions. This security flaw exists in the default CyberCash installation and configuration.
We at the Electronic Fraud Foundation also have no desire for these bugs to be publicized. We're making a goddamn fortune off of them. (Damn near as much as we're making off of our remailer-donation scam.) Ura Fishpal, Flounder, Electronic Fraud Foundation [Note: You are required by Federal Law to pay me one dollar for reading this post. Send $1 to EFF, Box 281, Bienfait, Sask. Canada S0C 0M0] [Note From Your System Administrator: Failure to comply with the above will result in loss of your access privileges and a hernia.]
At 11:33 PM +0100 on 11/8/97, Anonymous wrote:
Eric Cordian wrote:
In comp.sys.intel, the keeper of the Intel Secrets Website, rcollins@slip.net (Robert Collins) writes this absolutely amazing paragraph:
If nobody knew about this problem, nobody would be affected by it. No, I had no desire to publicize the bug.
We at the Electronic Fraud Foundation also have no desire for these bugs to be publicized. We're making a goddamn fortune off of them. (Damn near as much as we're making off of our remailer-donation scam.)
Hope you're making a kill(1)ing. Too bad any semi-intelligent entity with access to Alta-Vista can find enough info to exploit this bug, right now... Here's to hoping the remailer scam works out better - -j -- "This analogy is like lifting yourself by your own bootstraps." -Douglas R. Hofstadter _______________________________________________________________ Jamie Lawrence jal@acm.org
participants (2)
-
Jamie Lawrence
-
nobody@REPLAY.COM