full-disclosure - DCOM RPC exploit (dcom.c)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: dufresne at winternet.com (Ron DuFresne)
Subject: DCOM RPC exploit  (dcom.c)

	[SNIP]
>
> So, when you(pl) shake your head and think, "They could do so much
> better if they just had a clue", keep in mind that the real world
> doesn't always give you what you want or need, and you have to learn to
> deal with what exists, not with what you'd like to see exist.  And then
> you have to listen to all the armchair generals telling you how
> incompetent you are.  It's no wonder a lot of admins get very
> frustrated.  (Again, I'm not talking about myself.  I really don't give
> a rats ass what anyone thinks of me, so it doesn't matter what you say
> about me.  Which is why, BTW, I'm perfectly willing to keep pounding
> this point home, regardless of how much STFU mail I get.)
>
> Now I'm certain that *someone* in this group of resident geniuses will
> respond, "Well, the Dean should be fired if he's that stupid."  Well
> Einstein, Deans get paid for bringing money into the school and riding
> herd on the faculty.  The Alcatel deal *helps* his credibility with
> senior administration.  How's that for a topsy turvy world?
>

Of course the real question is;  does an academic, especially this
academic setting actually resemble the 'real world'.  The dean being
uppper middle management at the least, might well be either fighting to
keep their position, or looking for a new job.  Special case might be a
better way of viewing this environment.

What's interesting, in my *personal* perspecitive, is that texas keeps
popping up as being to unreal worldly in the state and edu settings.  It
was but two or three years ago I had a 'conversation' in another sec list,
with a texas state  employee whining about how he had a life and didn't
have the time to learn  and keep up with what's new.  Of course being
charged with auditing the states infrastructure and it's compliance to
the states policy, left one wondering how well they could face that task
with a stagnant knowledgebase.  <shrug>  maybe we need to downsize texas,
like east/west/north/south to help minimize the issues to something more
managable <grin>.

Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.