Have to admit
For various reasons I've been asked to scrub up on iOS development. I nearly screamed like a little girl when I opened the coding manual and saw the keyword "malloc". Noooooooooo!
Samba developers have warned of a software flaw that allows attackers to remotely execute malicious code on systems running the widely used file-sharing package. Version 3.5.5, which was released on Tuesday, fixes the underlying buffer overrun in functions used to generate a credential known as a Windows Security ID. It can be …
This post has been deleted by its author
You are using the "guns don't kill people, people do" argument - C doesn't write insecure programs, programmers do. Are you not?
One could compare USA and Canada on gun related crime, but that ignores the rich - poor divide, and large verses small social groups; Switzerland is relatively crime free.
In non-ironic mode I mean to say that C is a rusty, yet sharp knife welded to a rusty but functional AK-47 with silencer and a 1000 round magazine attached.
You can choose the following options to mutilate yourself:
A) posion blood from rust while trying to cut butter
B) silently shoot your missus with the first 100 rounds while dropping C from the breakfast table
C) silently shoot your whole family while using C to eat a part of your wedding cake
Police will notice only one month later, as C's silencer is working very well.
Oh, I forgot it has 100 meters of rope attached which you can use to strangulate yourself while trying to lower yourself from your mistress' second floor window to the ground. C's cloak will certainly deploy and only the circling ravens will notify the living of your death three weeks ago.
It's *possible* that your attacker doesn't have access to anything except the Samba (CIFS, Windows) ports, because the system is a fileserver for windows and any other access is being blocked by the system's firewall except from a few physically secure management systems.
Not very likely, though. In general if an attacker has your root password, you've lost.
A long long time ago, it was rumoured that if you created an ordinary user account named "root" on a MSDOS/Windows machine, when you connected to an Unix machine, that machine would assume you were that Unix machine's system-admin. Obviously, that is MS Windows fault.
Samba is the effort of reverse engineering MS's file-server and RPC protocols to serve Linux files to Windows machine, because Microsoft wanted the ability to lock users into Windows and did not want to use the several standard systems available.