News for hackers. Stuff that matters.
Re:Discontinued Microsoft Products by EvanAnderson on Thursday December 12, 2019 @05:51PM (#21777479)
The majority of county boards of elections in Ohio are using a voter registration management application that is still written in Visual FoxPro (and still uses DBF files as the back-end).

Aside: It has a recently-added ToTP implementation that replaces their prior "scan a barcode" system of "two factor" authentication. Of course, you can just open the DBF files directly in another tool and manipulate them w/o any "authentication". The mind boggles.

Re:Discontinued Microsoft Products by mikestew on Thursday December 12, 2019 @08:54PM (#21778488)
Direct DBF manipulation is small potatoes. Since the database container (.DBC) has to be writable to be of much use, use that same tool to add some triggers that will run whatever FoxPro code you want (which can call just about any Win32 API you want). If you’ve got FoxPro installed, skip the hex editor and open the DBC like a table (it is a DBF). If one is going to use DBFs, skip the database container feature if you can. It was a good idea maybe 25 years ago (umm, not really), but it was a different time and long before Microsoft started getting their security shit together.

—

Former Fox team member