Re: Exploiting code: The Future

[Gadi Evron <ge () linuxbox org>]

On Fri, 23 Jun 2006, Michal Zalewski wrote:
> On Fri, 23 Jun 2006, Mike Gilligan wrote:
>
> > Stack and heap based overflows were the traditional methods of
> > exploiting C/C++ code. then the previously unknown Format string attacks
> > were brought to the communities attention around 2000. Is it likely that
> > in 5 years time or sooner we will be talking about an as-yet unknown
> > form of exploitation or have we exhausted all methods of attacking C/C++
> > based code/apps?
>
> Nope. I've learned from a credible sources that in 5 years, all code
> attack vectors would be a thing of a past.

:)

I've learned from a credible source that:
1. 640 K ought to be enough for anybody!
2. In two year there will be no spam.
3. Vista will fix ALL vulnerabilities.
4. Vista wil make viruses a thing of the past.
5. Vista will make spyware a thing of the past.

So, I guess in 5 years when Vista comes out, we will all be out of work!

        Gadi.

> /mz
>
> ------------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Concerned about Web Application Security? 
> Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
> Choice Award from eWeek. As attacks through web applications continue to rise, 
> you need to proactively protect your applications from hackers. Cenzic has the 
> most comprehensive solutions to meet your application security penetration 
> testing and vulnerability management needs. You have an option to go with a 
> managed service (Cenzic ClickToSecure) or an enterprise software 
> (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
> help you: http://www.cenzic.com/news_events/wpappsec.php 
> And, now for a limited time we can do a FREE audit for you to confirm your 
> results from other product. Contact us at request () cenzic com for details.
> ------------------------------------------------------------------------------

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.