Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #103

Back to comp.security.unix Previous Next

#103

From: Bill W Smith Jr
Date: Tue, 06 Dec 1994 23:37

25 lines
2336 bytes

mgg@triada.triad.com (Mark Galbraith) writes:

> I think what we need is some cryptography.  8lgm could encrypt the
> exploit script, and then provide the decryption key to verified sysadms.
> The issue of how to verify a sysadms is a big one, but this would enable
> 8lgm to continue to provide the necessary advisories, without giving
> the crackers any more advantage than they already have.
> 
> One way I can think of to verify these people is to only send the key to
> people listed as the technical or administrative point of contact for
> a domain, as shown by the WHOIS command.  I know this is not
> foolproof, but it's better than what we have right now, which is *NO*
> information at all about this bug.

You are forgetting that not everyone is ON the Internet!!! I get my news
via UUCP and WHOIS will not tell you who I am, or that I AM the SysAdmin
for 2 sites...


------------------------------------------------------------------------------
Bill W Smith Jr <bill@srisoft.com>                    (Compuserve) 76460,1443
Senior Programmer             "Programming is an art, not a science!" - me
Sunland Resources, Inc.       makers of Service Plus(tm) and ServPlus EDI(tm)
(713) 955-2800 (Voice)        direct sales queries to sales@srisoft.com
(713) 955-7564 (Fax)          *** Software for the Distribution Industry ***

Technical Details

Message-ID: <kgRXwc2w165w@srisoft.com>

Path:

arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!swrinde!news.uh.edu!news.sccsi.com!nuchat!srisoft!bill

References: <MGG.94Nov30141142@triada.triad.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-ArrivalTime: 1994-12-06 19:01:04 PST
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!swrinde!news.uh.edu!news.sccsi.com!nuchat!srisoft!bill
From: bill@srisoft.com (Bill W Smith Jr)
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
Organization: SRI Software -- Software for the Distribution Industry
Date: Tue, 6 Dec 1994 23:37:07 GMT
Message-ID: <kgRXwc2w165w@srisoft.com>
References: <MGG.94Nov30141142@triada.triad.com>
Sender: bill@srisoft.com (Bill W Smith Jr)
Lines: 25

Reply to Parent Message