On Thu, 2014-08-14 at 19:37 -0500, John Traweek CCNA, Sec+ wrote:
> Usually an end user has to request the hotfix and fill out a form on
> the MS site and then MS will send out an email with the URI.
Pardon my ignorance, but... WHY!?
Why would anyone require filling out a web form, to send an automated
email with a link as response? Why not simply, you know, put the link in
the page the user gets in return after sending that completed form
anyway?
Using an email message as response to an HTTP GET or POST request to
transfer a http(s) URI is beyond clusterfuck.
(Yes, I do realize you merely described what MS does, and you're not
responsible for their lame process.)
> So to answer your question, yes, MS does send out emails with
> hotfixes, but only when an end user requests it, at least in my
> experience…
>
> If the end user did not specifically fill out a form/request the hot
> fix, then I would be very suspicious…
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
