On Sun, Sep 30, 2001 at 03:40:27PM -0700, M. Edward Borasky wrote:
> Here, for your amusement, is a snippet of Perl code:
>
> $stuff = `uname`;
> if ($stuff =~ /is not recognized as an internal or external command,/ {
> # execute malicious Windows code
> }
> else {
> # look at the uname stuff and figure out what OS we're running
> # then execute OS-specific malicious code
> }
>
> Do you see what I'm saying?
You run untrusted snippets of perl-code as root?
To return to your original argument,
If a company sells me a car that has a rust-proof guarantee under the
conditions that I keep it garaged 24/7 (similar to the Windows NT C2
rating). And when I take it for a spin someone sprays it with a garden
hose. The car falls apart from the rust. Do I have the right to lock
_any guy with a garden hose_ up in prison because they could cause
irrepairable damage to cars? Or maybe that car shouldn't have left the
factory in the first place.
Any further discussion can go to /dev/null.
Jan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sun Sep 30 2001 - 21:01:16 EST