>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.
Man, computers used to be fun
Man, computers used to be fun
A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.
And what about "borrowing" internet access by using a WiFi connection that used WEP? Learning the process and getting the first password was so satisfying...
I remember when SunOS shipped enterprise servers with pretty much every service enabled. And the patching process was so cumbersome and risky many admins never bothered applying the recommended patch clusters
So much to explore and poke at!
Then you could use that to winnuke them.
(To this day I can recall my ICQ number faster than my childhood phone number or my social security number.)
> This could lead to remote code execution over Bluetooth with no additional execution privileges needed.