6 ms·
Well, they obviously can, because they did. :) I would have thought that the script toolkits are unlikely to find a working RCE against an Alpha. They might ca
by timthorn 7y ago
Well, they obviously can, because they did. :)
I would have thought that the script toolkits are unlikely to find a working RCE against an Alpha. They might cause a DoS, but then again so might an HN post...
Edit: of course, it's not an Alpha! Ahem.
- SwellJoe 7y agoIt is an Alpha, according to the site text ("Alpha Micro Eagle 300"), just not a DEC Alpha processor. Seems like it's probably a 68000?
- classichasclass 7y agoIt's a 68EC030.
- SwellJoe 7y agoThat's not so tiny. Many of the servers that ran the early internet were about that powerful (and, many even running on that very chip). It's interesting that they used the MMU-less version. I would have assumed that since it was a multi-tenant server, they'd want memory management ASAP.
- classichasclass 7y agoYou'd think that, but protected memory has never been (much of) a thing with AMOS. There used to be an ugly bug where a POKE from AlphaBASIC could get you operator, for example. That got closed but similar exploits are undoubtedly possible, so most of the VARs dealt with the problem by just never letting users near a dot prompt (recall they just served vertical markets with their own bespoke software like PoS, CRM, call management, etc.).