OMGWTF

9 ms·

61.
by OMGWTF 12y ago
«Worryingly, it’s very easy to extract and use the encryption key run by Komodia, largely because the password to access all different versions of the certificate is “komodia”.» No, the problem is that big subsets of affected systems share
62.
by OMGWTF 12y ago
Here I have an explicit "FizzBuzz" but only 2 checks. Do you consider this also broken? python3 -c ' for i in range(1,20): print([i,"Fizz","Buzz","FizzBuzz"][int(i%3==0) + 2*int(
63.
by OMGWTF 12y ago
I tried to reimplement it with less code and data (as x86 instead of x86_64 however). I stopped at 110 bytes .text and 49 bytes .data: http://pastebin.com/bPfrB165
64.
by OMGWTF 12y ago
If the list contains 2 elements, it will overwrite the second parameter, so the total number of arguments is still the same.
65.
by OMGWTF 12y ago
I think $sth = $dbh->prepare("SELECT document FROM table WHERE tag=? AND security_level=?"); $sth->execute(foo(), $user_level); breaks as well, if foo() unexpectedly returns a list.
66.
by OMGWTF 12y ago
When will the site be switched off? I.e. when will links/bookmarks stop working?
67.
by OMGWTF 12y ago
The basic idea is to encode the array within a single integer: 0 + [anything, 31,28,31,30,31,30,31,31,30,31,30,31] 28 + [anything, 3, 0, 3, 2, 3, 2, 3, 3, 2, 3, 2, 3] 00, 11,00,11,10,11,10,11,11,10,11,10,11 reverse
68.
by OMGWTF 12y ago
You are right. I was lazy, I compiled it with gcc -O2 and extracted the assembler with objdump -Mintel -d.
69.
by OMGWTF 12y ago
How about 15 bytes? (x86, month in ecx, result in eax) // 28 + ((0x3bbeecc>>m>>m)&3); b8 cc ee bb 03 mov eax,0x3bbeecc d3 f8 sar eax,cl d3 f8 sar eax,cl 83 e0 03 a
70.
by OMGWTF 12y ago
// without floats, multiplication, division, modulo: int result = (30|m^(m>>3)) - (((m^13)+1)>>4<<1);
71.
by OMGWTF 12y ago
Using JPEG for a color test doesn't seem well thought out. Using GIMP (Colors, Map, Rotate Colors), one can make a letter appear in the center circle. I guess if the other circles had any letters in them, the compression ruined it.
72.
by OMGWTF 12y ago
Well, if a fix is possible without much hassle, it should be implemented. But it's crazy to raise as much attention as in this case.
73.
by OMGWTF 12y ago
I think the point of his critics wasn't that this is no real vulnerability but that the implied severity was blown out of proportion.
74.
by OMGWTF 13y ago
What does "Share scripts with up to 4 users" (Enterprice License) mean?