On Tue, 23 Apr 2002 [EMAIL PROTECTED] wrote:

> Suggestion: Why not embed this information into the binary, and
> provide some way of extracting it.

I like this!

> [Downside: "Announcement, script kiddies: If you find option
> UPDATE_DESCR_TABS=1 in the configuration information, then there's a
> very easy root exploit..."]

That's not a downside at all. If an exploit exists, you need only
try it, and it works or it doesn't.

In fact, it's an upside becuase it allows someone who doesn't have
exploit code more easily to determine whether or not he might be
vulnerable.

cjs
-- 
Curt Sampson  <[EMAIL PROTECTED]>   +81 90 7737 2974   http://www.netbsd.org
    Don't you know, in this new Dark Age, we're all light.  --XTC


---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?

http://archives.postgresql.org

Reply via email to