🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: az.internet
Article #7396

Re: AZSTARNET DOESN"T DELIVER

#7396
From: Pinky
Date: Wed, 16 Aug 1995 00:00
55 lines
2679 bytes
mark@nin.com (Mark Beeson) writes:

>Pinky (pinky@primenet.com) wrote:

>Learn from this, grasshopper.

>// files appearing in my directory not of my origin,

>% cd
>% chmod -R go-w .

Learn from this slug, sysadmin. are *supposed* to set up shells for
shell users, especially when they say they offer a service that they
don`t. The bash shell wasn`t set up with the proper permissions to
begin with. Tell this to the phone support people, who couldn't
fix a simple typing mistake over the phone; to the non-existent person
who was overseeing their system at the time. Thank god it wasn`t a really
serious problem, cuz their system, according to them often goes unsupervised
and unwatched. 

I`d sure like to know how you got information about my azstarnet account
that was never posted by me. Did you have communications with their
staff about my account? Considering what I know about azstarnet staff,
I`d be real careful using their services.


>// easy access to system files, 

>Oh yes, those damn /bin programs that are so nasty.  Or /usr/ucb, I hear
>those are really security risks too.

>// abililty to use su command

>This is a viable command.  If you want to inherit another user's
>characteristics, you use su [-] [username].  Granted, most of the
>time it's used to become superuser, but still.  I suppose you're
>going to gripe about the fact that rlogin is enabled, as well?

>I suggest you read man pages before going off on the security or
>your perceived notion of the lack thereof of a specific site.  As
>it is, AZStarnet looks very secure. (Let's hope that Bob has made
>/tmp sticky, though.)

I really don't think that su should be available to users, since this
combined with a password file and a good cracker program could
wreak havoc. Considering azstarnets willingness to share customer information
with the public and guys like you, it doesn`t matter how good their
technical security is, they are not secure. Period. End of Argument.

>--Mark
>--
>Mark Beeson  mark@nin.com  http://www.nin.com  http://www.smg.org

>"The Bible makes a killer coaster and can keep your table from wobbling."
>                                                      -- Jim Marcus
Technical Details
Message-ID: <40tlgh$5fe@nnrp2.primenet.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <40f0vu$o7s@nnrp2.primenet.com> <40g6dd$n22@nnrp1.primenet.com> <40rr76$rff@baygull.rtd.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: febea,3390f663eb5c2323
X-Google-Attributes: gidfebea,public
From: pinky@primenet.com (Pinky)
Subject: Re: AZSTARNET DOESN"T DELIVER
Date: 1995/08/16
Message-ID: <40tlgh$5fe@nnrp2.primenet.com>
X-Deja-AN: 108309264
references: <40f0vu$o7s@nnrp2.primenet.com> <40g6dd$n22@nnrp1.primenet.com> <40rr76$rff@baygull.rtd.com>
organization: Primenet
newsgroups: az.internet