🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #278

Re: Beta testers needed for security tool

#278
From: Bill Sommerfeld
Date: Mon, 07 Sep 1992 18:49
32 lines
2007 bytes
In article <18g4c7INNihj@matt.ksu.ksu.edu> holland@matt.ksu.ksu.edu (Rich Holland) writes:

   Ross Ridge <ross@zooid.guild.org> writes:

   >While this would be what I'd do, even this isn't 100% guaranteed if
   >someone has broken security on the machine.  It's possible, for instance,
   >that the mount command, shell or even kernel has been hacked to prevent
   >tripwire from doing it's job properly.

   *shaking head*  Man, some people can get just a LITTLE too paranoid!

   ...

   ...some people need a better sense of reality! 

You're one of them :-) 

For the record, there have been a number of instances of break-ins on
the Internet involving hacked operating systems software..  typically
/bin/login and/or telnet and/or telnetd.

Hacking the shell isn't too much harder than hacking any other
user-mode program.

It's a *lot* harder to replace write-protected boot media in a locked
cabinet through the network.

Multics, one of the most usable of secure systems (and most secure of
usuable systems), was always booted from a write-protected *tape*,
which contained the boot loader, kernel-equivalent, shared libraries,
and critical commands.
--
Technical Details
Message-ID: <WESOMMER.92Sep7144915@bill-the-cat.mit.edu>
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sun-barr!olivea!mintaka.lcs.mit.edu!bloom-picayune.mit.edu!athena.mit.edu!wesommer
References: <18e5kgINNkpf@matt.ksu.ksu.edu> <Bu6r2q.AG5@mentor.cc.purdue.edu> <CKD.92Sep6222202@loiosh.eff.org> <1992Sep7.102653.18888@zooid.guild.org> <18g4c7INNihj@matt.ksu.ksu.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sun-barr!olivea!mintaka.lcs.mit.edu!bloom-picayune.mit.edu!athena.mit.edu!wesommer
From: wesommer@mit.edu (Bill Sommerfeld)
Newsgroups: comp.security.misc,alt.security,alt.sources.d,comp.sources.testers,comp.unix.admin
Subject: Re: Beta testers needed for security tool
Message-ID: <WESOMMER.92Sep7144915@bill-the-cat.mit.edu>
Date: 7 Sep 92 18:49:26 GMT
References: <18e5kgINNkpf@matt.ksu.ksu.edu> <Bu6r2q.AG5@mentor.cc.purdue.edu>
 <CKD.92Sep6222202@loiosh.eff.org>
 <1992Sep7.102653.18888@zooid.guild.org> <18g4c7INNihj@matt.ksu.ksu.edu>
Sender: news@athena.mit.edu (News system)
Organization: Massachusetts Institute of Technology
Lines: 32
In-Reply-To: holland@matt.ksu.ksu.edu's message of 7 Sep 1992 12:43:35 -0500
Nntp-Posting-Host: bill-the-cat.mit.edu