POV-Ray : Newsgroups : povray.programming : Hackers... (Howto "not being hacked with povray") Server Time
28 Jul 2024 20:34:40 EDT (-0400)
  Hackers... (Howto "not being hacked with povray") (Message 21 to 30 of 44)  
<<< Previous 10 Messages Goto Latest 10 Messages Next 10 Messages >>>
From: Ron Parker
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 10:42:10
Message: <slrn91akej.9e7.ron.parker@fwi.com>
On 17 Nov 2000 10:37:03 -0500, Warp wrote:
>Ron Parker <ron### [at] povrayorg> wrote:
>: Or simply modifying the povray source code to exit with an error after
>: 1 million iterations of the same loop.
>
>  Yes, that would be certainly easier :)
>
>  However, you have to take into account nested loops (think about 10 nested
>loops, each one of them looping 1 million times).

And of course we can extend that arbitrarily.  What about one million loops,
each executing one million times?  What about one million jobs with one 
million loops each executing one million times?  What about isosurface and
antialiasing and media parameters that ensure 0pps for an entire image?

-- 
Ron Parker   http://www2.fwi.com/~parkerr/traces.html
My opinions.  Mine.  Not anyone else's.


Post a reply to this message

From: Ken
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 11:10:34
Message: <3A1558F9.44FA56F9@pacbell.net>
Ron Parker wrote:

> What about isosurface and antialiasing and media parameters that
> ensure 0pps for an entire image?

I haven't seen 0 pps since I bought a faster computer.

Excuse me wrong topic :)

-- 
Ken Tyler - 1400+ POV-Ray, Graphics, 3D Rendering, and Raytracing Links:
http://home.pacbell.net/tylereng/index.html http://www.povray.org/links/


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 12:42:08
Message: <3a156df0@news.povray.org>
It's rather easy: +a0 +r1000

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/

  "The derivative of sin(2x) is cos(2x)"  - Matt Giwer


Post a reply to this message

From: Simon Lemieux
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 15:35:10
Message: <3A15A4A6.B6D4399@yahoo.com>
>   Note also that there could be whitespaces inside the parentheses
> (although I think that 'whatever' meant also that, but just mentioning).

So I think that scanning for "*fopen*" should do it? Right?

-- 
+-------------------------+----------------------------------+
| Simon Lemieux           | Website : http://www.666Mhz.net  |
| Email : Sin### [at] 666Mhznet | POV-Ray, OpenGL, C++ and more... |
+-------------------------+----------------------------------+


Post a reply to this message

From: Francois Dispot
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 16:44:20
Message: <3A15A6B3.3F1D7280@club-internet.fr>
Warp wrote:
> 
> Francois Dispot <woz### [at] club-internetfr> wrote:

>   If it's a basic unix system, there shouldn't be any danger.
>   I have run out of memory several times (even when running povray) and
> nothing special has happened. The program just ended with an "out of memory".

Wow, Solaris seems to be a lucky OS...
If you start a hard-core swapping session, and several processes request
memory at the same time, you cannot guess which one will get the "out of
memory" problem first. When this happens, I usually lose my rc5 proxy
server and other relatively useless things like ntpd, nothing lethal.

>   In Unix you can also limit the amount of memory a user can allocate.

This is exactly what I wrote (ulimit)

>   "The derivative of sin(2x) is cos(2x)"  - Matt Giwer

;-))

-- 

      __  __ __  __  _
|  | /  \  /  / |_  /  |/
\/\/ \__/ /_ /_ |__ \_ |\


Post a reply to this message

From: Pabs
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 17 Nov 2000 21:53:24
Message: <3A15EF75.132221A@hotmail.com>
Simon Lemieux wrote:

> So I think that scanning for "*fopen*" should do it? Right?

What about if fopen was part of a string
- eg text{ ttf "arial.ttf" "I have put fopen in this file as a text primitive
& now you can't render it" pigment{rgb 1}}
--
Bye
Pabs


Post a reply to this message

From: Simon Lemieux
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 18 Nov 2000 17:15:32
Message: <3A170DA2.3F30936D@yahoo.com>
> What about if fopen was part of a string
> - eg text{ ttf "arial.ttf" "I have put fopen in this file as a text primitive
> & now you can't render it" pigment{rgb 1}}

Oh come on!... I guess that would be your problem! ;)

-- 
+-------------------------+----------------------------------+
| Simon Lemieux           | Website : http://www.666Mhz.net  |
| Email : Sin### [at] 666Mhznet | POV-Ray, OpenGL, C++ and more... |
+-------------------------+----------------------------------+


Post a reply to this message

From: Peter J  Holzer
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 18 Nov 2000 18:02:25
Message: <slrn91dta9.qkc.hjp-usenet@teal.h.hjp.at>
On 16 Nov 2000 16:20:50 -0500, Ron Parker wrote:
>On Thu, 16 Nov 2000 17:15:39 -0500, Simon Lemieux wrote:
>
>>What if I'm not on linux but on Windows? what about MacOS? what about the newer
>>MacOS X?
>
>MacOS X is of course BSD-based, so should support things like permissions and
>chroot.  The other two aren't server operating systems, and running server
>processes on them is just asking for trouble.

Well Windows NT and 2000 are promoted as and used as server OSs
(although personally I think that any OS which needs a graphics card
isn't a real server OS), and they have a good permission system. Of
course the default permissions are totally wrong for a server (at least
for NT4, W2k looks a bit better), so if you want to run a server on them
you should know what you are doing.

	hp

-- 


| |   | hjp### [at] wsracat      |    -- Lutz Donnerhacke in dasr.
__/   | http://www.hjp.at/ |


Post a reply to this message

From: Peter J  Holzer
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 18 Nov 2000 18:02:28
Message: <slrn91dtpk.qkc.hjp-usenet@teal.h.hjp.at>
On 17 Nov 2000 10:15:03 -0500, Warp wrote:
>Francois Dispot <woz### [at] club-internetfr> wrote:
>: Warp and Ron gave good ideas.
>
>  I really hope that the guy who tried to hack that povray-site mentioned
>in p.general did not get his ideas from that thread. I would feel quite
>guilty if he/she did... :(

Don't feel guilty. Security by obscurity never works for long, and if
you hadn't said it somebody else would have, or it would just have taken
a little bit longer until somebody had tried it. At least that thread
gave Steve the chance to fix the holes. That he didn't until he was hit,
is unfortunate, but that happens to the best of us.

>  In Unix you can also limit the amount of memory a user can allocate.

Not really. You can limit the amount of memory a single process can
allocate and the number of processes for each user. Unfortunately most
users need many small processes and few large ones, so the product of
both values is generally too large to be useful.

	hp

-- 


| |   | hjp### [at] wsracat      |    -- Lutz Donnerhacke in dasr.
__/   | http://www.hjp.at/ |


Post a reply to this message

From: Warp
Subject: Re: Hackers... (Howto "not being hacked with povray")
Date: 20 Nov 2000 05:38:13
Message: <3a18ff15@news.povray.org>
Pabs <pab### [at] hotmailcom> wrote:
: What about if fopen was part of a string

  It could also be a part of an identifier name.

#declare numberofopencylinders = 10;

-- 
main(i,_){for(_?--i,main(i+2,"FhhQHFIJD|FQTITFN]zRFHhhTBFHhhTBFysdB"[i]
):_;i&&_>1;printf("%s",_-70?_&1?"[]":" ":(_=0,"\n")),_/=2);} /*- Warp -*/


Post a reply to this message

<<< Previous 10 Messages Goto Latest 10 Messages Next 10 Messages >>>

Copyright 2003-2023 Persistence of Vision Raytracer Pty. Ltd.