Funny, I thought that's when the fun really started.

--
Timothy Heald
Web Portfolio Manager
Diplomatic Security
U.S. Department of State
571.345.2319

The opinions expressed here do not necessarily reflect those of the U.S. Department of State or any affiliated organization(s).  Nor have these opinions been approved or sanctioned by these organizations. This e-mail is unclassified based on the definitions in E.O. 12958.

-----Original Message-----
From: Burns, John D [mailto:[EMAIL PROTECTED]
Sent: Friday, April 23, 2004 10:40 AM
To: CF-Community
Subject: RE: A lesson in security by obscurity...

Matt,

Sorry, I am the one who started it :-)  If it helps any, I did about the
same thing.  Not that I got to level 15 I've given up because it's no
longer testing "_javascript_" like it said it was to begin with (not to
mention the decompiling of the java class) and since I don't claim to be
an expert hacker of Linux systems, I don't feel like I'm admitting
defeat by giving up on something I don't claim to be very good at :-)

John

-----Original Message-----
From: Matthew Small [mailto:[EMAIL PROTECTED]
Sent: Friday, April 23, 2004 7:51 AM
To: CF-Community
Subject: Re: A lesson in security by obscurity...

You guys suck.  Since now I'm only reading posts in the evening when I
get home, I saw this challenge last night and was hooked on it.  I'm
stuck at trying to get into the .htaccess level (level 15).   I had a
full evening planned: swimming, dinner, friends/survivor, then settling
in for a night of homework after speaking with my fiancee and then off
to bed at 11:30.  ut instead, I got hooked on this dumb thing and
started working on my homework at 11:15.  I finally finished that about
1:15.  

- Matt Small

----- Original Message -----
  From: Heald, Tim
  To: CF-Community
  Sent: Thursday, April 22, 2004 4:31 PM
  Subject: RE: A lesson in security by obscurity...

  I fully intend on doing nothing else this evening.

  The latest batch of Microsoft security holes, and their accompanying
patches have been approved by our change management group here and I am
jumping out my A$$ trying to get the login script in the pdc tested, and
then scripting the baseline analyzer to make sure they all take.

  YAY!!

  --
  Timothy Heald
  Web Portfolio Manager
  Diplomatic Security
  U.S. Department of State
  571.345.2319

  The opinions expressed here do not necessarily reflect those of the
U.S. Department of State or any affiliated organization(s).  Nor have
these opinions been approved or sanctioned by these organizations. This
e-mail is unclassified based on the definitions in E.O. 12958.

  -----Original Message-----
  From: bret [mailto:[EMAIL PROTECTED]
  Sent: Thursday, April 22, 2004 4:32 PM
  To: CF-Community
  Subject: Re: A lesson in security by obscurity...

  Burns, John D wrote:

  > I made it to level 15 but gave up there.  There's something about
  > downloading an improperly named .htaccess file from a parent
directory
  > but I am not having any luck.  I heard 16 was pretty bad, so I'm not
  > sure I even want to mess with that.  Oh well, I give up.
  >
  > John Burns

  Yeah, I got to level 12 this morning, but then reminded myself that I
  have lots and lots of freelance work to be doing, and that, ahem, I'm
my
  only employee. D'oh!

  -Bret
  -------------------------------------------------------------
  http://www.workshed.com : graphic design + web development
  [ we have the tools. we know how to use them.]
  [or: 971-223-2824] + [wa: 360-910-4127] + [fx: 360-817-2569]
    _____
  _____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to