2006-08-11

(funny,security) booty call == replay attack

This is how security guys think... I don't know whether to laugh or cry!

Dean Wilson@UnixDaemon: In search of (a) life

Wikipedia's definition of Booty Call

"Booty calls can be used by one partner of an ended relationship to obtain sex from the ex-partner, due to lingering emotions and feelings of a need for continued physical connection."

Security guys analysis of the above:

"This one's pretty obvious, it's a replay attack. You've already gone through the authorisation and authentication processes and now you're reusing previously obtained credentials to obtain access to a resource."

No comments: