10.10.2003

Hi,

just put the floppy reading java call in an applet for those who think
the problem has nothing to do with java. The problem is that
the sandbox should protect the system from untrusted access
to system ressources, such as a floppy drive. But again
like many things in the jdk (see illegalaccess.org for details)
this does not work like printed in the java specification.

You can try the new floppy applet at:
http://www.illegalaccess.org/exploits/java/applet/MyFloppySucks.html

Tested on:
- IE 6
- Opera 7.2
- Netscape

on Win32...

Warning: The applet may start an alert message to enter a floppy
disk, if this [your own!] disk is infected by a virus, it may damage
your PeeCee. But the applet itself is plain java, no
disk virus included !

*again full-disclosure*

This page is powered by Blogger. Isn't yours?