Article View: comp.security.misc
Article #278Re: Beta testers needed for security tool
From: Bill Sommerfeld
Date: Mon, 07 Sep 1992 18:49
Date: Mon, 07 Sep 1992 18:49
32 lines
2007 bytes
2007 bytes
In article <18g4c7INNihj@matt.ksu.ksu.edu> holland@matt.ksu.ksu.edu (Rich Holland) writes: Ross Ridge <ross@zooid.guild.org> writes: >While this would be what I'd do, even this isn't 100% guaranteed if >someone has broken security on the machine. It's possible, for instance, >that the mount command, shell or even kernel has been hacked to prevent >tripwire from doing it's job properly. *shaking head* Man, some people can get just a LITTLE too paranoid! ... ...some people need a better sense of reality! You're one of them :-) For the record, there have been a number of instances of break-ins on the Internet involving hacked operating systems software.. typically /bin/login and/or telnet and/or telnetd. Hacking the shell isn't too much harder than hacking any other user-mode program. It's a *lot* harder to replace write-protected boot media in a locked cabinet through the network. Multics, one of the most usable of secure systems (and most secure of usuable systems), was always booted from a write-protected *tape*, which contained the boot loader, kernel-equivalent, shared libraries, and critical commands. --
Technical Details
Message-ID:
<WESOMMER.92Sep7144915@bill-the-cat.mit.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sun-barr!olivea!mintaka.lcs.mit.edu!bloom-picayune.mit.edu!athena.mit.edu!wesommerReferences:
<18e5kgINNkpf@matt.ksu.ksu.edu> <Bu6r2q.AG5@mentor.cc.purdue.edu> <CKD.92Sep6222202@loiosh.eff.org> <1992Sep7.102653.18888@zooid.guild.org> <18g4c7INNihj@matt.ksu.ksu.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sun-barr!olivea!mintaka.lcs.mit.edu!bloom-picayune.mit.edu!athena.mit.edu!wesommer From: wesommer@mit.edu (Bill Sommerfeld) Newsgroups: comp.security.misc,alt.security,alt.sources.d,comp.sources.testers,comp.unix.admin Subject: Re: Beta testers needed for security tool Message-ID: <WESOMMER.92Sep7144915@bill-the-cat.mit.edu> Date: 7 Sep 92 18:49:26 GMT References: <18e5kgINNkpf@matt.ksu.ksu.edu> <Bu6r2q.AG5@mentor.cc.purdue.edu> <CKD.92Sep6222202@loiosh.eff.org> <1992Sep7.102653.18888@zooid.guild.org> <18g4c7INNihj@matt.ksu.ksu.edu> Sender: news@athena.mit.edu (News system) Organization: Massachusetts Institute of Technology Lines: 32 In-Reply-To: holland@matt.ksu.ksu.edu's message of 7 Sep 1992 12:43:35 -0500 Nntp-Posting-Host: bill-the-cat.mit.edu