Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Server Daily
IT Management Daily
Subscribe News
Subscribe PR
Subscribe Security

internet.com
Internet News
Small Business

Advertise
Newsletters
Tech Jobs
E-mail Offers

 






Current Newswire:

Want a Job? Learn Linux

PC-BSD 9 review – to FreeBSD what Ubuntu is to Debian

Time to dispel open source myths, says Liam Maxwell

SECURITY: Nmap Inside and Out

Eight features Windows 8 'borrowed' from Linux

Malware devs embrace open-source

A tale of two distros: Ubuntu and Linux Mint

Raspberry Pi benchmarked against Beagleboard, low price is long term

20 popular Ubuntu Linux apps you may want to try

A Selection of the Very Best Open Source Tutorials and Tools



Applications Management Engineer Sr (NYC)
Next Step Systems
US-NY-New York

Justtechjobs.com Post A Job | Post A Resume
:Fake Unix and Linux Advisory - The /dev/null Vulnerability
Fake Unix and Linux Advisory - The /dev/null Vulnerability
Nov 17, 2008, 04 :01 UTC (0 Talkback[s]) (5812 reads)

(Other stories by Mike Tremell)

[ Thanks to Mike Golvach for this link. ]

"The contemporary method of /dev/null drivers is described as the "high suction algorithm" in comparison with the replacement that vendors have made available for their systems. If a malicious user uses a program with low-resistance logic to connect /dev/null back into itself, the device goes critical and can be used for destructive purposes.

"Once the /dev/null device driver enters a critical state, programs with low-resistance logic will break, be consumed by /dev/null and expose their standard input to the full force of /dev/null itself. Some examples which have been verified in labs include the following:


* Programs which are consumed by /dev/null become permanent entry points to /dev/null afterward.
* If standard input is redirected from any regular file, it will be "sucked dry" and left empty. File permissions do not prevent loss of data.
* If standard input is redirected from a directory, all the files and directories within it will be sucked dry, recusrively removing an entire directory tree."

Complete Story

Related Stories:
XKCD - Linux, Unix And Other Funny Cartoons(Nov 16, 2008)
Unix And Linux Humor - Cult Satire(Nov 10, 2008)
Stupefying Linux and Unix Humor(Nov 08, 2008)
Funny Mozilla Bugs - Open Source Humor(Nov 02, 2008)
Ridiculous Resumes - Unix, Linux and Everything in Between(Oct 26, 2008)
Unix - What Is It? More Linux/Unix Humor(Oct 25, 2008)



No talkbacks posted.
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!

..............................




All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP