ID, Apples

[Dave Aitel <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John Carmack had some interesting things to say lately. Maybe Luigi
Auriemma can help him out. :>

http://money.cnn.com/2006/05/17/commentary/game_over/column_gaming/index.htm
"""
Carmack said his fear for the industry doesn't revolve around content,
but around security.

While he said id Software is especially careful to lock down its game
engines, companies that license and make changes to those engines
often aren't as focused, which could open the door to disaster.

While it hasn't happened yet, Carmack thinks it's just a matter of
time before some clever hacker finds a way to insert a virus into a
game engine.

"Security's a twitchy thing," he said. "If anything, the game industry
has dodged a bullet because [when a virus does get inserted into a
game engine] someone who's playing a game at work will unknowingly let
loose something catastrophic."
"""

Sinan Eren wrote a working version of GREENAPPLE, a remote kernel
overflow in SMB for Windows 2000. It's available now to Immunity
Partners, but it will be in the June Immunity CANVAS release, which
will be interesting. Essentially it's the first remote kernel overflow
I've ever seen - maybe someone knows of one I don't?

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFEcQDfB8JNm+PA+iURAiLEAJ4w1p9jeo3mDqMw8IrRDloPJspjegCgji6k
OrBn9KAlBIQCtct/gQKWen8=
=oE1P
-----END PGP SIGNATURE-----