3 ms·
We actually encrypted the code of dangerous tools (we wrote in Perl back then) like this one with a password so the customers (telecoms) tech people, who were m
by marcus 19y ago
We actually encrypted the code of dangerous tools (we wrote in Perl back then) like this one with a password so the customers (telecoms) tech people, who were mostly clueless, wouldn't be able to play around with our tools.
The program was just a tiny bit of code describing the tool, prompting for a password, tried to decrypt the code of the original program using the password and evaled the code.
- bayareaguy 19y agoInteresting idea. You would think the database user/password and a few grant/revoke statements would be sufficient to prevent issues like the one in the article.
- marcus 19y agoThe problem was the clients support staff had root access on all the machines.