Scarecrow Man Posted October 26, 2005 Report Share Posted October 26, 2005 [0]Psy writes "I attended [1]Phreaknic this weekend where [2]Acidusreleased [3]TinyDisk, a shared file system that runs on top of [4]TinyURLor his own implementation [5]NanoURL. TinyDisk compresses a file,encrypts it, and dices it into clusters. Each cluster is submitted toTinyURL as if it were a url. This clusters can be read back out of thedatabase, making TinyDisk a global file system anyone can use. There aresafeguards in the default config to prevent people from dumping gigs ofMP3s into TinyURL. While file-system-on-web-applications are nothing new(GMail file system anyone?) this hack shows how easy it is toaccidentally design a web application insecurely despite the default PHPprotections. See his [3]presentation for more info"http://developers.slashdot.org/comments.pl...5/10/25/0350222[0] http://www.cs.gatech.edu/[1] http://www.phreaknic.info/[2] http://www.shmoocon.org/speakers.html#acidus[3] http://www.msblabs.org/tinydisk/index.php[4] http://www.tinyurl.com/[5] http://www.msblabs.org/nanourl/index.php Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.