Re: How Secure is Windows, Really?

[Brian <system.i.lists@xxxxxxxxx>]

Better yet, how about you create and distribute a freeware utility like
WRKDBF with a timer set for a few years into the future so confidence in the
utility is achieved then when the timer is tripped you start randomly
selecting a record from the file being updated and perform such mischief. Do
you have a freeware utility like WRKDBF installed? Do you know what's in the
code?

This message is not in anyway way meant to suggest that WRKDBF contains any
malware but just used it as an example of freeware that is installed and
used by those with high-level authority without them really knowing what's
in the code.

Kind regards,

BJ


On 1/3/07, Walden H. Leverich <WaldenL@xxxxxxxxxxxxxxx> wrote:
> >Application level damage would be easier, but would
> >require fairly detail knowledge of the application and how it's
> >configured.  I would guess that this kind of thing would be implemented
> >by someone on the inside.
>
> Really?... How about selecting all the tables from systables, then for
> each table select all the numeric fields w/decimal positions and then
> for each of them execute a sql statement that updates their values to
> the effect of (set fld1 = fld1 * 0.01)... Easy to implement w/out any
> knowledge of the underlying applications and subtle enough that it
> probably wouldn't be noticed until lots of damage had occurred.
>
> Also, you assume that knowledge of the application would have to come
> from the inside. The beauty of packages is that the table names are well
> known.
>
> -Walden
>
> --
> Walden H Leverich III
> Tech Software
> (516) 627-3800 x3051
> WaldenL@xxxxxxxxxxxxxxx
> http://www.TechSoftInc.com
>
> Quiquid latine dictum sit altum viditur.
> (Whatever is said in Latin seems profound.)
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.