🚀 go-pugleaf

rouilj@dl5000.bc.edu (John P. Rouillard) writes:
}>   Why don't I trust root? I don't know you. And, on the majority of UNIX
}>   machines it is fairly simple for any user to become root.

}Well, how simple it is depends on the system. Currently I have systems
}that can be rebooted into root mode.  However, when that is done, the
}experimental rfc931 server (no, it is not available for public access
}or use yet) that runs on that machine loses its encryption key. Thus
}by getting an rfc931 identifier that says "rouilj" I can tell you
}immediately that it isn't a valid identifier since there was no way
}you should be able to get an unencrypted identifier out of one of my
}properly operating servers.  Thus there is a high degree of
}probability that that letter was forged.

If I were the user who booted into root mode I would also fire up
a simple daemon on the rfc931 port which always answered every
request with "SDdf;sadf344sagfarg" (or whatever identifier I had
seen myself recently in mail to me).

John
-- 
John Hascall                                       ``Live with it pink-boy!''
Project Vincent                                                              
Iowa State University Computation Center                     john@iastate.edu
Ames, IA  50011                                      515/294-9551 [fax -1717]