lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <Pine.GSO.4.43.0507061427080.29351-100000@tundra.winternet.com> Date: Wed Jul 6 20:28:51 2005 From: dufresne at winternet.com (Ron DuFresne) Subject: alert: the 111111 bug Of course, this is not a bug, but bad admin/dbadmin practise, for which there are no patches available. thanks, Ron DuFresne On Mon, 4 Jul 2005, lsi wrote: > platforms affected: all > distribution of threat: wide > severity of threat: potentially serious > leadtime: 6.3 years :) > > I noticed one of my customers using the "special" date of 11/11/11 in > their database. > > I've since realised this practice might be quite widespread, and > indeed warrants an alert than on or around the 11th of November 2011, > some crazy things might happen, as folks' "special" dates collide > with the real date of 11/11/11. > > For this customer 11/11/11 in the date field means, don't process > this record, which will obviously cause problems with legitimate > transactions on that date. > > I suspect using a new field to flag a state, instead of "special" > data, would have been more appropriate. > > Apologies if this is old news for you. > > Stu > > --- > Stuart Udall > stuart at@...erdelix.dot net - http://www.cyberdelix.net/ > > --- > * Origin: lsi: revolution through evolution (192:168/0.2) > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > -- "Sometimes you get the blues because your baby leaves you. Sometimes you get'em 'cause she comes back." --B.B. King ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything.
Powered by blists - more mailing lists