From: | Curt Sampson <cjs(at)cynic(dot)net> |
---|---|
To: | cbbrowne(at)cbbrowne(dot)com |
Cc: | Thomas Lockhart <lockhart(at)fourpalms(dot)org>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: "make report" |
Date: | 2002-04-23 08:18:14 |
Message-ID: | Pine.NEB.4.43.0204231716480.445-100000@angelic.cynic.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Tue, 23 Apr 2002 cbbrowne(at)cbbrowne(dot)com wrote:
> Suggestion: Why not embed this information into the binary, and
> provide some way of extracting it.
I like this!
> [Downside: "Announcement, script kiddies: If you find option
> UPDATE_DESCR_TABS=1 in the configuration information, then there's a
> very easy root exploit..."]
That's not a downside at all. If an exploit exists, you need only
try it, and it works or it doesn't.
In fact, it's an upside becuase it allows someone who doesn't have
exploit code more easily to determine whether or not he might be
vulnerable.
cjs
--
Curt Sampson <cjs(at)cynic(dot)net> +81 90 7737 2974 http://www.netbsd.org
Don't you know, in this new Dark Age, we're all light. --XTC
From | Date | Subject | |
---|---|---|---|
Next Message | Curt Sampson | 2002-04-23 08:22:00 | Re: Documentation on page files |
Previous Message | Martijn van Oosterhout | 2002-04-23 07:52:00 | Re: Documentation on page files |