• 0 Posts
  • 51 Comments
Joined 2 years ago
cake
Cake day: December 10th, 2024

help-circle

  • There’s other good posts here about path traversal recently but I don’t think anyone has touched on…this (paths matter) has been happening for decades.

    Story time. In the early aughts (year 2000 👴 ) Microsoft IIS had a bug due to backwards compatibility with MSDOS 💾 . The effect was you could find an, ummm, open FTP server, create a LPT1 or COM1 directory, then a subdirectory and this path would be invisible to the system admin. If you knew the path, you could ummm store things in it such as the latest movie, game, etc. Arrgh 🏴‍☠️

    /edit Ooops, forgot this is a Linux community. Some terms:

    IIS - Microsoft’s server. It had a bunch of things in one package; web server, file server, email server, etc.

    MSDOS - Oldass Microsoft operating system. I forget if its the first one. Only supports 8.3 filenames (8 characters plus 3 for file extension).

    FTP - File transfer protocol. We were sending bits over the wire without encryption, YOLO

    LPT1/COM1 - special devices in MSDOS, printer port and serial port











  • I don’t think you understood my sentence, we (the company) already offer plenty of choices. In fact we offer OpenAI (Codex, ChatGPT) as well as Gemini. I just admin Cursor, Copilot and Claude (and at one time we offered Windsurf, but that didn’t have enough users to rectify the costs/time spent administrating it). What I am trying to tell you is that the fairly new companies, OpenAI, Cursor, Anthropic/Claude absolutely suck at making their product usable by the enterprise while Gemini and Copilot completely understand enterprise needs/requirements.

    We already have Linux laptops (with enterprise controls). /edit Apple machines are primarily used though. We even offer Windoze if you really need it! (Some folks do.)