• Hanzito (unregistered)

    is_truth_dead? frist: file_not_found

  • (nodebb)

    of course, Harry prided himself on the completeness of his C implementation, including execv() and the like

    execv() is part of POSIX, and not part of C.

  • Trolly (unregistered)

    Well, I did that in a few weeks including rewriting it at least one time. It's not that complicated even without bison and yak.

  • (nodebb)

    If the school didn't understand the importance of upgrading, I suppose that Jared B. could always have just mapped out the school's IP space, written a program to force the upgrade to the new version, and then executed that over the insecure endpoint. Though on Windows, that's tricky because you can't delete/replace the EXE file of a currently running program or any other files in use by that, so you'd need to use some trick like the MoveFileEx() function with the MOVEFILE_DELAY_UNTIL_REBOOT flag and then force a reboot. Also this would be legally dubious.

    As Steve_The_Cynic mentioned, execv() is not part of ANSI C and doesn't exist on Windows. I suppose one could implement execv() using CreateProcess() and ExitProcess() without too much trouble; but you'd have a lot more trouble implementing fork() on Windows, which doesn't have any native equivalent. Take a look at how Cygwin implemented fork() on Windows, it's absolutely disgusting; and if you're unlucky with DLL load addresses, it can just fail randomly too.

  • Fik of the borg (unregistered)

    When I read "The opposite of meritocracy is ..." I mentally completed "... politcian", where obedience to the shouter at the top is the decisive factor.

  • Officer Johnny Holzkopf (unregistered) in reply to adamantoise
    Comment held for moderation.

Leave a comment on “RCE As a Feature”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article