News for hackers. Stuff that matters.
Re:The Easter Egg Song by manas2004 on Friday March 22, 2013 @12:09PM (#5423827)
The way this code looks, it opened up a backdoor into the app to load any code embedded in the image, and execute it with the app's credentials - including access to app's in memory data. Major security hole for an enterprise app given that this could be used to override assembly signing. Just change the image, and the app would load and run any code embedded in that background image!
Re:The Easter Egg Song by Cherian on Friday March 22, 2013 @12:22PM (#5423905)
Yes the image was embedded as a resource IIRC and the assembly signed (enterprise app)
Re:The Easter Egg Song by manas2004 on Friday March 22, 2013 @01:00PM (#5424129)
Oh ok - good that the image was not picked up from a path in the install folder. I thought that was the case! That would have been bad.