Article View: comp.security.misc
Article #268Re: SMTP SECURITY: A new (?) idea
From: King Ables
Date: Thu, 13 Aug 1992 15:15
Date: Thu, 13 Aug 1992 15:15
30 lines
2069 bytes
2069 bytes
From article <1992Aug13.102249.16853@jarvis.csri.toronto.edu>, by flaps@dgp.toronto.edu (Alan J Rosenthal): > > These > forgers will include system administrators and also people who break in to > privileged accounts. As a former sysadm, I take offense at this remark and I think many current ones will, too. I will give you the benefit of the doubt and assume you are not trying to say that sysadms are, by nature, underhanded individuals (which is what it sounds like) but that you simply chose a poor way of trying to say that only privileged users would be able to accomplish such a feat, but that many people could get these privileges in different ways. It *is* true that someone with the root password can do pretty much anything they want. One of the most important qualities in a good sysadm is honesty integrity because they *do* have the power to do so much and it would be very easy to abuse it. They also need the intelligence to know what is reasonable and what is not. Most do. But the basic point is sound. Whoever can be root can obtain "authorization" to look official, so from another machine, why is that enough to make you believe? I can become root on my machine right now simply by rebooting it. I am not the system administrator here, I'm just one of many users. Just because I say I'm root, doesn't mean your machine should trust me to do whatever I want! --------------------------------------------------------------- King Ables HAL Computer Systems, Inc. ables@hal.com 8920 Business Park Dr., Suite 300 +1 512 794 2855 Austin, TX 78759 ---------------------------------------------------------------
Technical Details
Message-ID:
<1992Aug13.151514.14735@hal.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!olivea!hal.com!halaus!ablesReferences:
<1992Aug13.102249.16853@jarvis.csri.toronto.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!olivea!hal.com!halaus!ables From: ables@hal.com (King Ables) Newsgroups: comp.security.misc Subject: Re: SMTP SECURITY: A new (?) idea Message-ID: <1992Aug13.151514.14735@hal.com> Date: 13 Aug 92 15:15:14 GMT References: <1992Aug13.102249.16853@jarvis.csri.toronto.edu> Organization: HaL Computer Systems, Inc. Lines: 30