Re: How Secure is Windows, Really?

Better yet, how about you create and distribute a freeware utility like
WRKDBF with a timer set for a few years into the future so confidence in the
utility is achieved then when the timer is tripped you start randomly
selecting a record from the file being updated and perform such mischief. Do
you have a freeware utility like WRKDBF installed? Do you know what's in the
code?

This message is not in anyway way meant to suggest that WRKDBF contains any
malware but just used it as an example of freeware that is installed and
used by those with high-level authority without them really knowing what's
in the code.

Kind regards,

BJ


On 1/3/07, Walden H. Leverich <WaldenL@xxxxxxxxxxxxxxx> wrote:

>Application level damage would be easier, but would
>require fairly detail knowledge of the application and how it's
>configured.  I would guess that this kind of thing would be implemented
>by someone on the inside.

Really?... How about selecting all the tables from systables, then for
each table select all the numeric fields w/decimal positions and then
for each of them execute a sql statement that updates their values to
the effect of (set fld1 = fld1 * 0.01)... Easy to implement w/out any
knowledge of the underlying applications and subtle enough that it
probably wouldn't be noticed until lots of damage had occurred.

Also, you assume that knowledge of the application would have to come
from the inside. The beauty of packages is that the table names are well
known.

-Walden

--
Walden H Leverich III
Tech Software
(516) 627-3800 x3051
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.