POV-Ray : Newsgroups : povray.programming : Hackers... (Howto "not being hacked with povray") Server Time
28 Jul 2024 22:31:49 EDT (-0400)
  Hackers... (Howto "not being hacked with povray") (Message 15 to 24 of 44)  
<<< Previous 10 Messages Goto Latest 10 Messages Next 10 Messages >>>
From: Simon Lemieux
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 09:58:49
Message: <3A1555CE.56094EAE@yahoo.com>
> If you are running an old version of the SuperPatch, watch out for #exec
> commands in the .pov and .ini files.  Also, check to make sure that the
> scene files are not #including files that they shouldn't (such as your
> password file).

Thanks, nice one...  It could render the encrypted password in the image and
nobody would pay attention to it... thinking it's part of the render...

For the #exec, I will only use Official povray... no patches...

Thanks,
	Simon

-- 
+-------------------------+----------------------------------+
| Simon Lemieux           | Website : http://www.666Mhz.net  |
| Email : Sin### [at] 666Mhznet | POV-Ray, OpenGL, C++ and more... |
+-------------------------+----------------------------------+


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:10:00
Message: <3a154a48@news.povray.org>
Ron Parker <ron### [at] povrayorg> wrote:
: It's "<any whitespace>#<any whitespace>fopen<any whitespace>(whatever)"

  Note also that there could be whitespaces inside the parentheses
(although I think that 'whatever' meant also that, but just mentioning).

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:15:03
Message: <3a154b77@news.povray.org>
Francois Dispot <woz### [at] club-internetfr> wrote:
: Warp and Ron gave good ideas.

  I really hope that the guy who tried to hack that povray-site mentioned
in p.general did not get his ideas from that thread. I would feel quite
guilty if he/she did... :(
  (Although there wasn't anything in that thread that couldn't be
deduced reading the povray documentation...)

: If you make a scene featuring an infinite loop adding objects to an
: union, you will have POV crash after running out of memory.
: Unfortunately it is likely that some other processes die to, including
: system services.

  If it's a basic unix system, there shouldn't be any danger.
  I have run out of memory several times (even when running povray) and
nothing special has happened. The program just ended with an "out of memory".

  In Unix you can also limit the amount of memory a user can allocate.

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:19:57
Message: <3a154c9d@news.povray.org>
Ron Parker <ron### [at] povrayorg> wrote:
: No it can't.  That's a famous theorem by from Computer Science, called the 
: Halting Problem.  It's insoluble.

  It's insoluble in the general case (that is, there's no general solution
for testing the halting of an algorithm).
  Sometimes, however, it can be easy:

#while(true) #end

  However, it's very easy to make it more complicated.
  It can be made so complicated that it's not possible for ANY logic to
deduce whether it will stop or not (just think about a short code which
tests the Fermat Theorem for all combinations of the four numbers and ends
when it finds an answer).

  Theoretically it would be possible to limit the number of loops, eg.
don't allow the #while to make more than 1 million loops.
  This, however, would require parsing the code as povray does.

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Ron Parker
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:33:19
Message: <slrn91aju0.9e7.ron.parker@fwi.com>
On 17 Nov 2000 10:19:57 -0500, Warp wrote:
>  Theoretically it would be possible to limit the number of loops, eg.
>don't allow the #while to make more than 1 million loops.
>  This, however, would require parsing the code as povray does.

Or simply modifying the povray source code to exit with an error after
1 million iterations of the same loop.

-- 
Ron Parker   http://www2.fwi.com/~parkerr/traces.html
My opinions.  Mine.  Not anyone else's.


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:37:03
Message: <3a15509f@news.povray.org>
Ron Parker <ron### [at] povrayorg> wrote:
: Or simply modifying the povray source code to exit with an error after
: 1 million iterations of the same loop.

  Yes, that would be certainly easier :)

  However, you have to take into account nested loops (think about 10 nested
loops, each one of them looping 1 million times).

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Ron Parker
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:42:10
Message: <slrn91akej.9e7.ron.parker@fwi.com>
On 17 Nov 2000 10:37:03 -0500, Warp wrote:
>Ron Parker <ron### [at] povrayorg> wrote:
>: Or simply modifying the povray source code to exit with an error after
>: 1 million iterations of the same loop.
>
>  Yes, that would be certainly easier :)
>
>  However, you have to take into account nested loops (think about 10 nested
>loops, each one of them looping 1 million times).

And of course we can extend that arbitrarily.  What about one million loops,
each executing one million times?  What about one million jobs with one 
million loops each executing one million times?  What about isosurface and
antialiasing and media parameters that ensure 0pps for an entire image?

-- 
Ron Parker   http://www2.fwi.com/~parkerr/traces.html
My opinions.  Mine.  Not anyone else's.


Post a reply to this message

From: Ken
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 11:10:34
Message: <3A1558F9.44FA56F9@pacbell.net>
Ron Parker wrote:

> What about isosurface and antialiasing and media parameters that
> ensure 0pps for an entire image?

I haven't seen 0 pps since I bought a faster computer.

Excuse me wrong topic :)

-- 
Ken Tyler - 1400+ POV-Ray, Graphics, 3D Rendering, and Raytracing Links:
http://home.pacbell.net/tylereng/index.html http://www.povray.org/links/


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 12:42:08
Message: <3a156df0@news.povray.org>
It's rather easy: +a0 +r1000

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Simon Lemieux
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 15:35:10
Message: <3A15A4A6.B6D4399@yahoo.com>
>   Note also that there could be whitespaces inside the parentheses
> (although I think that 'whatever' meant also that, but just mentioning).

So I think that scanning for "*fopen*" should do it? Right?

-- 
+-------------------------+----------------------------------+
| Simon Lemieux           | Website : http://www.666Mhz.net  |
| Email : Sin### [at] 666Mhznet | POV-Ray, OpenGL, C++ and more... |
+-------------------------+----------------------------------+


Post a reply to this message

<<< Previous 10 Messages Goto Latest 10 Messages Next 10 Messages >>>

Copyright 2003-2023 Persistence of Vision Raytracer Pty. Ltd.