Posts by Martin Lindberg
Last ←Newer Page 1 2 3 4 5 Older→ First
-
OnPoint: #WTFMSD: "Damning", in reply to Rich of Observationz,
or has some kind of security hole.
(Example: I was in the bank the other day. To calculate mortgage repayments, they use CICS.
I dare you to find a security hole in CICS ;-)
-
Hard News: When we had hope and change, in reply to Joe Wylie,
At the time I thought that he must have been reasonably well off to afford so many burgers.
I wonder how many burgers John Key could afford?
-
It could become an issue for the privates commissioner.
-
OnPoint: H4x0rs and You, in reply to Geoff Lealand,
Lois Lane, were particularly dim by not figuring out that Clark was never around when Superman was
Oh come on! Clark Kent wears glasses!
-
almost Friday...
-
OnPoint: MSD's Leaky Servers, in reply to BenWilson,
A crowbar just doesn't cost very much.
... or a wrench
-
OnPoint: MSD's Leaky Servers, in reply to Matthew Poole,
And this, which is even more explicit that the testers found things and reported them, and there was a failure to follow through on what was reported.
That seems more likely. I've engaged with Dimension Data (or rather, their subsidiary SecurityAssessment.com) a number of times and I really don't believe they would have missed a security-issue like this.
-
OnPoint: MSD's Leaky Servers, in reply to duke,
Write = save = paste (kinda); which he had to do to put the files on the USB!
I was referring to the files on the network.
-
OnPoint: MSD's Leaky Servers, in reply to duke,
Yup. In case you weren't aware saving = write to disk. Hence read/write privilege.
Yes, but I can't see that Keith tried to write/edit/save anything.
-
OnPoint: MSD's Leaky Servers, in reply to Sacha,
Just drop a file with the same name into the open file dialogue box. Microsoft has effectively turned that dialogue box into a slim file-manager
True. I recall keyboard shortcuts working there in the past too.
Still, you would require write-access to the files, which I don't think has been established.
However, if that's the case it would seriously compromise the integrity of any information stored in those documents. This could be a giant legal loophole for any disputes between MSD and ... well, anyone really.
