my friend is taking a pretty high level class - mcs494 - it is a "special topic" class; this semester they are doing unix/linux security and such. 60% of their total grade consists of finding 10 security holes in current unix/linux distros that have not been found before. As soon as a person finds one, they post it on the course website, so if you find the same hole it will not count.
What do you guys think about it?
some entropy with that sink? entropysink.com
there are two cardinal sins from which all others spring: Impatience and Laziness. - franz kafka
Gotta be pretty tough to find ones that haven't been found before... It just doesn't sound right to me.
th4tz t0ta1y h4x0r 6u6er, wayaauw
Jesus does that ever sound hard.
I think it might be a bit easier on them if they go to relatively unknown distros and poke around. Maybe look around in some lesser-known programs.
do they get to look in any distro they want? how about programs that introduce holes in the system, or is it strictly the kernel?
either way, that's a hard project. but since it's a special class, they probably know the good students can handle it.
its not a "special" class - it is just a class with "special topics"...i.e. the topic changes from semester to semester.
some entropy with that sink? entropysink.com
there are two cardinal sins from which all others spring: Impatience and Laziness. - franz kafka
Howdy,
I'd like to see that web site.
M.R.
I don't like you very much. Please post a lot less.
Cheez
*and then*
No, I know you were joking. My point still stands.
>> I'd like to see that web site.
yeah, I would like to see it as well Howdy. Unfortunately most of our course websites are on a system called blackboard, which is not viewable to people outside of the course. I might, however, have some insight into this whole thing and will keep you guys posted
some entropy with that sink? entropysink.com
there are two cardinal sins from which all others spring: Impatience and Laziness. - franz kafka
axon do your own homework :P
meh?
some entropy with that sink? entropysink.com
there are two cardinal sins from which all others spring: Impatience and Laziness. - franz kafka
It sounds as if any security fault counts. In theory, there exist a lot of problems. That doesn't mean they are exploitable or practically "usable".
Do a search for strcpy or strcat and you've got yourself a ton of potential errors waiting to happen.
hth
-nv
She was so Blonde, she spent 20 minutes looking at the orange juice can because it said "Concentrate."
When in doubt, read the FAQ.
Then ask a smart question.
Anyone else see the title of this thread and thought it would be about something completly different?
Only you thantor (sorry, had to do it in memory of our dear ethic).
As for blackboard, try using the username/password combo of guest/guest.
or student/student
thats almost as common as guest/guest for schools.
That's an interesting assignment indeed. Is it 10 per person, or 10 total for the class?
