mkosmo

4 ms·

1. 1.▲
   by mkosmo 9y ago

   Agreed, a popped account is a bad thing, especially if it's published as such. A larger risk would be somebody popping one of the compromised-credential repositories. Then you've got both username and password. But here we&#x27
2. 2.▲
   by mkosmo 9y ago

   I've asked many devs why they chose Mongo over a RDBMS. They can never give me a technical answer. It's always 'it's cool' or because they just read something about it on some non-technical blog. It usually only t
3. 3.▲
   by mkosmo 9y ago

   Makes me wonder what they require to classify the bug as a security bug. Perhaps it gets classified otherwise since there's no data leakage other than an address? The existence of an address isn't exactly confidential.
4. 4.▲
   by mkosmo 9y ago

   No updates since 2005, designed for 6.2... Holy cow you had to go dumpster diving to find that script. I love the guy's changelog, though! :wq
5. 5.▲
   by mkosmo 9y ago

   And even if it was, there were ways to get anonymous execution through the task manager, or the infamous help-dialog login bypass.
6. 6.▲
   by mkosmo 9y ago

   That'd make sense. Written in python, for python (at least initially) since the author likes python :-) Looks like a neat start to a new project. The built-in IRC client made me chuckle, though.
7. 7.▲
   by mkosmo 10y ago

   It's never too hard to figure something out if you're given the whole shebang instead of a loose breadcrumb trail.