full-disclosure - Secuirty Hole Found In Dave's Sock

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050908200516.GA28608@arobas.net>
Date: Thu Sep  8 21:07:50 2005
From: vladimir at arobas.net (Vladimir Parkhaev)
Subject: Secuirty Hole Found In Dave's Sock

Dave,
your work around is very complicated and requires usage of 2 feet. Only Windows users
have to perform this complex task of sock switching. There is a simple workaround for UNIX users:
It is enough for UNIX users to simply turn the sock inside out and continue wearing it on the same foot.

There is more details in
B. W. Kernighan, The Unix System and Softwear Reusability, Proc. Workshop on Softwear Reusability, 
pp. 235-239, Newport RI, September 1983, 
(Reprinted in IEEE Trans. on Software Engineering Vol SE-10 (5) pp. 513-518 September 1984) .


Quoting Dave Cawley (dave.cawley@...lphia.com):
> Date:		9/8/2005
> 
> Vulnerability Found:   	Hole In Dave's Socket
> 
> Affected System:		Dave's Right Sock
> 
> Severity:			Rating: Moderately Critical
> 				Impact: System access
> 				Where:  Foot
> 
> Description of Vulnerability:  This morning while putting my socks
> on I found a small (1/4 inch) hole by my big toe. This could be
> exploited by a virus through the bottom of the foot or under the
> toe nail. This could be used to compromise Dave's entire system.
> 
> Solution: No permanent solution is currently available. A work
> around is to wear the sock on the other foot to have the hole
> above the small toe where it will not be furthur enlarged, it
> will proboably fold over and partially cover the vulnerability.
> Permanent solution coming in either a sock darning or upgrading
> the unit to a new sock.
> 
> Time Table:		Found at 7:48am on Sept 8th, 1005
> 			Work around figured out at 7:49am on Sept 8th,
> 2005
> 			Permanent Solution Pending
> 
> Credits:		Found by Dave
> 
> References:		No references available.
> 
> 
> ***************************************************************
> Dave D. Cawley           |
> High Speed Internet      |    The number of Unix installations
> Duryea, PA               | has grown to 10, with more expected.
> (570)451-4311 x104       |  - The Unix Programmer's Manual,1972
> dave.cawley@...lphia.com |
> ***************************************************************
>                   URL => http://www.adelphia.net 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

-- 
.signature: No such file or directory