Tuesday, October 25, 2005
TinyDisk, A File System on Someone Else's Web App
"I attended Phreaknic this weekend where Acidus released TinyDisk, a shared file system that runs on top of TinyURL or his own implementation NanoURL. TinyDisk compresses a file, encrypts it, and dices it into clusters. Each cluster is submitted to TinyURL as if it were a url. This clusters can be read back out of the database, making TinyDisk a global file system anyone can use. There are safeguards in the default config to prevent people from dumping gigs of MP3s into TinyURL. While file-system-on-web-applications are nothing new (GMail file system anyone?) this hack shows how easy it is to accidentally design a web application insecurely despite the default PHP protections. See his presentation for more info"
source:http://developers.slashdot.org/developers/05/10/25/0350222.shtml?tid=95&tid=108&tid=230
source:http://developers.slashdot.org/developers/05/10/25/0350222.shtml?tid=95&tid=108&tid=230
# posted by dark master : 10/25/2005 09:29:00 AM
