7*7 = a simple equation for taking total control of multiple VMware-powered clouds Ethical hacking firm Citadelo has explained a bug it discovered which allowed complete takeover of multiple VMware-powered clouds. The flaw, CVE-2020-3956, was thankfully patched in mid-May. We say thankfully because it impacted vCloud Director, the tool VMware recommends service providers use to run multiple clouds for their …
That tag line reminded me of a very old hack in Windows 3.51 and maybe even early editions of 95. Back in the day when Windows serial numbers did not contain any letters, somebody spotted that they were always divisible by 7, so you could just mash away at the 7 key, hit OK and you were licensed...
Well, what do you expect when Management in the Corporate World is firing old programmers and hiring wet-behind-the-ears new graduates with absolutely zero street smarts? Throw in so-called "DevOps" and its insistence that QA can be dispensed with (as a money saving measure, don'tchaknow) along with Marketing's attitude of "just ship it, we don't care if it's useful to anybody, some schmuck will buy it!" and Bob's your Auntie.
The proverbial thinking man can probably see that it's only going to get worse before it gets better ... and a techie with an entrepreneurial bent can undoubtedly figure out how to profit from this shortsightedness on the part of marketing and management.
A script is not an executable in and of itself (not withstanding *nix parlance), rather it automates the execution of a task or tasks, some of which may be executables.
You are quite correct. The proper parser is difficult to come by, so they probably aren't parsed as often as they ought to be. My bad.
Make that "they are scripts and should be parsed" ... Beer?
Make that "they are scripts and should be parsed" ... Beer? .... jake
Parsed by whom and/or what is then the question to be asked or avoided, jake, .... and to what end would logically follow in any civilised conversation over a pint or three.
Can we expect the likes of the MOD newbies in the 13th Signal Regiment to be interested in such novel matters?
I wonder if they have a virtual presence easily discovered which accepts emails with document attachments? If they haven't, does one have to conclude that the space they exercise in is too dangerous for them and catastrophically vulnerable to alternative input beyond their command and control for future output?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
