🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #268

Re: SMTP SECURITY: A new (?) idea

#268
From: King Ables
Date: Thu, 13 Aug 1992 15:15
30 lines
2069 bytes
From article <1992Aug13.102249.16853@jarvis.csri.toronto.edu>, by flaps@dgp.toronto.edu (Alan J Rosenthal):
>
> These
> forgers will include system administrators and also people who break in to
> privileged accounts.

As a former sysadm, I take offense at this remark and I think many current
ones will, too.  I will give you the benefit of the doubt and assume you are
not trying to say that sysadms are, by nature, underhanded individuals (which
is what it sounds like) but that you simply chose a poor way of trying to
say that only privileged users would be able to accomplish such a feat, but
that many people could get these privileges in different ways.

It *is* true that someone with the root password can do pretty much anything
they want.  One of the most important qualities in a good sysadm is honesty
integrity because they *do* have the power to do so much and it would be very
easy to abuse it.  They also need the intelligence to know what is reasonable
and what is not.  Most do.

But the basic point is sound.  Whoever can be root can obtain "authorization"
to look official, so from another machine, why is that enough to make you
believe?  I can become root on my machine right now simply by rebooting it.
I am not the system administrator here, I'm just one of many users.  Just
because I say I'm root, doesn't mean your machine should trust me to do
whatever I want!
---------------------------------------------------------------
King Ables                    HAL Computer Systems, Inc.
ables@hal.com                 8920 Business Park Dr., Suite 300
+1 512 794 2855               Austin, TX  78759
---------------------------------------------------------------
Technical Details
Message-ID: <1992Aug13.151514.14735@hal.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!olivea!hal.com!halaus!ables
References: <1992Aug13.102249.16853@jarvis.csri.toronto.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!olivea!hal.com!halaus!ables
From: ables@hal.com (King Ables)
Newsgroups: comp.security.misc
Subject: Re: SMTP SECURITY: A new (?) idea
Message-ID: <1992Aug13.151514.14735@hal.com>
Date: 13 Aug 92 15:15:14 GMT
References: <1992Aug13.102249.16853@jarvis.csri.toronto.edu>
Organization: HaL Computer Systems, Inc.
Lines: 30