Secure Coding mailing list archives

2010 bug hits millions of Germans | World news | The Guardian


From: stephencraig.evans at gmail.com (Stephen Craig Evans)
Date: Thu, 7 Jan 2010 10:43:52 -0600

Hi Ken,

Looks like there's another one:

Symantec Y2K10 Date Stamp Bug Hits Endpoint Protection Manager
http://www.eweek.com/c/a/Security/Symantec-Y2K10-Date-Stamp-Bug-Hits-Endpoint-Protection-Manager-472518/?kc=EWKNLSTE01072010STR1

I am VERY curious to learn how these happened... Only using the last
digit of the year? Hard for me to believe. Maybe it's in a single API
and somebody tried to be too clever with some bit-shifting.

Stephen

-- 
http://www.linkedin.com/in/stephencraigevans

On Thu, Jan 7, 2010 at 8:45 AM, Kenneth Van Wyk <ken at krvw.com> wrote:
FYI, below is a link to an article with some additional impact details of the "2010 bug" that's been cropping up in 
various places. ?Still no light being shed on the actual programming error, though. ?I think it would make a 
fascinating case study, or at least discussion, here.

http://www.guardian.co.uk/world/2010/jan/06/2010-bug-millions-germans


Cheers,

Ken

-----
Kenneth R. van Wyk
KRvW Associates, LLC
http://www.KRvW.com

(This email is digitally signed with a free x.509 certificate from CAcert. If you're unable to verify the signature, 
try getting their root CA certificate at http://www.cacert.org -- for free.)






_______________________________________________
Secure Coding mailing list (SC-L) SC-L at securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________





Current thread: