 |
| |
| |
|
Who's Online |
|
We have 173 guests and 2 members online |
|
| |
|
|
 |
|
EH-Net
|
|
May 18, 2013, 11:00:17 AM
|
|
202
|
Ethical Hacking Discussions and Related Certifications / Physical Security / Re: Anyone know anything about locks ?
|
on: August 26, 2012, 04:25:49 PM
|
After the post by chrisj about his friend having his padlocks cut by the TSA, my initial thought was WTF. However, some quick research into the TSA revealed that this is common practice. I also came across the information about approved locks you posted. Whilst looking into this further, I was surprised about the number of people complaining about using TSA approved locks and still having them cut. |
|
|
|
|
207
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: DOS bug I found
|
on: August 22, 2012, 12:09:45 PM
|
sternone I don’t think we confusing them I just trying point out that it sometimes hard to decide between the two. Even if you look this post some people said it’s a type of DOS some said no way so there is a lot of confusing around it.
Wikipedia says "In computing, a denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users"
So by purchasing the entire shop when you have no intention to pay for them are you not in a way making resources unavailable to its intended users?
If you stop your friends from having access to his phone by entering the pin so many times wrong are you not denying him access to his machine?
I just trying say that it sometimes hard to identify if an issue is a DOS, Logical or any other type of flaw.
No you are not. Wikipedia is very correct, they are talking about having the servers or networks being not responding. If you use a bug to lock up a certain function of the program in this case ordering a product for a certain period that is not making the servers or the network unresponsive. I'm done with this discussion, you can have it all, sure, all bugs are 'denial of service' and hey, even if we programmed it so you get locked out for a certain period well then its a 'denial of service' also. Yeah right. there is hope in this industry for me after all, if I need to compete with you guys... Sigh...  I wouldn't entirely rely on Wikipedia for a source of information if at all. They are discussing DoS at the network layer, DoS can also occur at the application layer. With regard to abusing the account lockout process to cause a DoS, heres a couple of links that I suggest you read: http://projects.webappsec.org/w/page/13246921/Denial%20of%20Servicehttps://www.owasp.org/index.php/Denial_of_Servicehttp://technet.microsoft.com/en-us/library/cc737614%28v=ws.10%29.aspx |
|
|
|
|
208
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: DOS bug I found
|
on: August 22, 2012, 10:17:43 AM
|
|
I believe the distinction between the two is that the DoS condition you refer to in the reserve and collect function is a consequence of the applications flawed functionality/logic. It is this flaw that is the underlying issue and is therefore the issue that should be reported. If the functionality was implemented correctly it couldn't be abused to cause the situation you describe.
The account lockout functionality isn't flawed as it is functioning as intended, i.e. reacting to incorrect logins. It is the abuse of it's intended function resulting in a DoS, that would be the issue.
|
|
|
|
|
209
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: DOS bug I found
|
on: August 22, 2012, 08:29:31 AM
|
An intresting question would be if you have a phone that has a lock feature on it and your friend decides to play a game. He enters your pin wrong 3 times this then lock the phone for 1 min. He then does it again 3 more times and lock the phone for 10 min. He then keeps on doing this until the phone is locked for 60min.
Would you say that was a DOS ? as mentioned above you not really using resources up like ram, HDD or the processor. you are just locking him out of his phone and stoping him from using the phone for 1 hour.
Personally, I would consider this a clearcut DoS through abuse of the account lockout functionality. |
|
|
|
|
210
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: DOS bug I found
|
on: August 22, 2012, 07:23:38 AM
|
How is Amazon doing it ?
I'm not sure. As far as I'm aware Amazon don't offer reserve and collect as they don't have retail premises. My experience of the reserve and collect process is based off of how major UK retailers such as Argos and PC World are doing it. The item is removed from stock until the end of the next business day without requiring payment. The item was reported to the client as DOS bug. I am not sure what the recommendation was to the client, as I did not finish the report or was in the call to the client.
I think the client was made aware of it was enought for them. I mean from the feedback the client gave the bug had been in the application for well over 10 years.
I am not sure how Amazon are doing it but I would say most companies that are using the same methods.
Jamie, thanks for the information. |
|
|
|
|
Loading...
|
|
|
|
Show Posts
General Certification : CPT Practical Submission
