🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #577

Re: Secure shell by mail

#577
From: Barry Margolin
Date: Tue, 13 Oct 1992 20:23
20 lines
1263 bytes
In article <1992Oct13.172459.28720@zip.eecs.umich.edu> ayman@eecs.umich.edu (Ayman I. Kayssi) writes:
>I posted a question on comp.unix.questions about how to get a shell by email,
>that is a shell that would execute what's in the body of an email message.
>All the details have been worked out except for one thing: security.

How about this:

Include in the header a string in both plaintext and encrypted form.  The
receiving system would decrypt the encrypted form and compare it to the
plaintext.

One problem with this is that it's quite amenable to known-plaintext
attacks.  And it also requires a decryption key to be stored on the
destination system, unless you use a public-key encryption system.

-- 
Barry Margolin
System Manager, Thinking Machines Corp.

barmar@think.com          {uunet,harvard}!think!barmar
Technical Details
Message-ID: <1bfb87INNj22@early-bird.think.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!barmar
References: <1992Oct13.172459.28720@zip.eecs.umich.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!barmar
From: barmar@think.com (Barry Margolin)
Newsgroups: comp.security.misc
Subject: Re: Secure shell by mail
Date: 13 Oct 1992 20:23:35 GMT
Organization: Thinking Machines Corporation, Cambridge MA, USA
Lines: 20
Distribution: usa
Message-ID: <1bfb87INNj22@early-bird.think.com>
References: <1992Oct13.172459.28720@zip.eecs.umich.edu>
NNTP-Posting-Host: telecaster.think.com