Editing 2166: Stack

Jump to: navigation, search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision Your text
Line 8: Line 8:
  
 
==Explanation==
 
==Explanation==
 +
{{incomplete|Created by a HACKER. Please mention here why this explanation isn't complete. Do NOT delete this tag too soon.}}
 +
In software engineering, a {{w|Solution stack|tech stack}} is the set of technology platforms and tools that a company or app uses. A common tech stack is {{w|LAMP (software bundle)|LAMP}}, composed of a {{w|Linux}} {{w|Operating system|operating system}}, an {{w|Apache HTTP Server|Apache}} {{w|Web server}}, a {{w|MySQL}} {{w|database}}, and the {{w|PHP}} programming language.
  
In software engineering, a {{w|Solution stack|tech stack}} is the set of technology platforms and tools that a company or app uses. A common tech stack is {{w|LAMP (software bundle)|GLAMP}}, composed of a {{w|Linux|GNU/Linux}} {{w|Operating system|operating system}}, an {{w|Apache HTTP Server|Apache}} {{w|Web server}}, a {{w|MySQL}} {{w|database}}, and the {{w|PHP}} programming language.
+
In this instance, all of the layers represent some type of compromised systems instead of various software technologies.
  
In this instance, all of the layers represent systems which have been subverted or compromised ("cracked") by various entities, instead of various software technologies. The stack resembles an OSI network architecture, with an eighth layer added representing the user itself.
+
Comic [[1636: XKCD Stack]] also has a hypothetical technology stack, with farcial layers.
 
 
'''Compromised by a customer:''' The user experience, above the OSI layers. Compromised by users doing something wrong or ill-advised.
 
 
 
'''Compromised by a former employee:''' In the OSI model, this would be the application layer. The application may include a hidden spyware in its codebase. Recent examples of compromise: Desjardins Group
 
 
 
'''Compromised by a current employee:''' This is the presentation layer. See above. Probably, that was compromised by a mistake of a current unexperienced employee.
 
 
 
'''Compromised by Bitcoin miners:''' This is the session layer, where SSL historically resided. Cryptographic exploits may cause compromise of whole communication. Examples of compromise: Dozens of bitcoin mining viruses.
 
 
 
'''Compromised by unknown hackers:''' This is the transport layer. IP and port spoofing is a possible compromise.
 
 
 
'''Compromised by our own government:''' This is the network layer. It refers to communication intercepts by governments. Examples of compromise: Cisco (for US citizens)
 
 
 
'''Compromised by a foreign government:''' This is the data link layer. This layer may be compromised by malrouting packets. Examples of compromise: Huawei (for non-Chinese citizens)
 
 
 
'''Massive undiscovered hardware vulnerability:''' This is the physical layer. An undiscovered hardware vulnerability may cause compromises further up in the stack. Examples of compromises:
 
{{w|Intel Management Engine}}, {{w|Meltdown (security vulnerability)|Meltdown}}, {{w|Row hammer}}
 
 
 
In the title text, Randall expresses sympathy for a situation where someone spends a significant length of time on something that then becomes completely unnecessary.  In this case, it's the state-sponsored hackers who develop an exploit of some hardware component, which then becomes completely useless because the target database on that hardware is totally open anyway to anyone with a web browser (which is essentially everyone).  While he's not suggesting he agrees with their hacking, he has some sympathy for their wasted effort.
 
  
 
==Transcript==
 
==Transcript==
 +
{{incomplete transcript|Do NOT delete this tag too soon.}}
 
:[Single-panel with a label at the top and 8 box layers stacked vertically, with in and out arrows at the top representing normal data flow and an arrow out of each box to the left or right representing exploit data flow]
 
:[Single-panel with a label at the top and 8 box layers stacked vertically, with in and out arrows at the top representing normal data flow and an arrow out of each box to the left or right representing exploit data flow]
 
:The Modern Tech Stack
 
:The Modern Tech Stack
 
:*Compromised by a customer (arrow to the right)
 
:*Compromised by a customer (arrow to the right)
 
:*Compromised by a former employee (arrow to the left)
 
:*Compromised by a former employee (arrow to the left)
:*(separator)
 
 
:*Compromised by a current employee (arrow to the right)
 
:*Compromised by a current employee (arrow to the right)
 
:*Compromised by bitcoin miners (arrow to the right)
 
:*Compromised by bitcoin miners (arrow to the right)
 
:*Compromised by unknown hackers (arrow to the left)
 
:*Compromised by unknown hackers (arrow to the left)
:*(separator)
 
 
:*Compromised by our own government (arrow to the right)
 
:*Compromised by our own government (arrow to the right)
 
:*Compromised by a foreign government (arrow to the left)
 
:*Compromised by a foreign government (arrow to the left)
 
:*Massive undiscovered hardware vulnerability (arrow to the right)
 
:*Massive undiscovered hardware vulnerability (arrow to the right)
 
==Trivia==
 
Comic [[1636: XKCD Stack]] also has a hypothetical technology stack, with farcical layers.
 
  
 
{{comic discussion}}
 
{{comic discussion}}

Please note that all contributions to explain xkcd may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see explain xkcd:Copyrights for details). Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following CAPTCHA:

Cancel | Editing help (opens in new window)