full-disclosure - Re: DLL hijacking with Autorun on a USB drive

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <12467.1284568572@localhost>
Date: Wed, 15 Sep 2010 12:36:12 -0400
From: Valdis.Kletnieks@...edu
To: Stefan Kanthak <stefan.kanthak@...go.de>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: DLL hijacking with Autorun on a USB drive

On Wed, 15 Sep 2010 17:45:27 +0200, Stefan Kanthak said:
> BTW: Windows developers and administrators should know their platform.

You're new here, aren't you? :)

Out in the real world, if they have a McSE cert and know enough to keep the
server running, they get the job even if they don't understand what some of
those mystical registry keys do.  The sad fact of the matter is that there are
a *lot* of servers out there, and there simply aren't enough truly clued
experienced admins to run them all.  So most of them limp along with an unclued
admin (who very well may be also acting as a secretary, or a junior designer,
or a tech writer or a grad student, and who really wants to get back to their
"real" job instead of futzing around with the server).

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/