Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #70

Back to comp.security.unix Previous Next

#70

From: Mark Galbraith
Date: Wed, 30 Nov 1994 22:11

19 lines
2500 bytes

I think what we need is some cryptography.  8lgm could encrypt the
exploit script, and then provide the decryption key to verified sysadms.
The issue of how to verify a sysadms is a big one, but this would enable
8lgm to continue to provide the necessary advisories, without giving
the crackers any more advantage than they already have.

One way I can think of to verify these people is to only send the key to
people listed as the technical or administrative point of contact for
a domain, as shown by the WHOIS command.  I know this is not
foolproof, but it's better than what we have right now, which is *NO*
information at all about this bug.

Of course now we have the problem of finding a cryptographic method
which works for both U.S. and foreign sites.  ;-)
-- 
Mark Galbraith                     Voice:  +1 510 449 0606 x6513
Senior Software Engineer/Postmaster        FAX:  +1 510 373 9611
Triad Systems Corporation                  E-mail: mgg@triad.com
Livermore, California                "#include <std/disclaimer>"

Technical Details

Message-ID: <MGG.94Nov30141142@triada.triad.com>

Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!ix.netcom.com!netcomsv!triada!mgg

References:

<8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU> <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com> <3bg70j$78h@zikzak.apana.org.au> <3bge0d$p7p@golf.ustores.missouri.edu> <gburnoreD027BL.9nD@netcom.com> <3bhsto$s69@wrdis02.robins.af.mil>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-ArrivalTime: 1994-11-30 17:59:33 PST
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!ix.netcom.com!netcomsv!triada!mgg
From: mgg@triada.triad.com (Mark Galbraith)
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
In-Reply-To: sbthomps@robins.af.mil's message of 30 Nov 1994 12:58:32 GMT
Message-ID: <MGG.94Nov30141142@triada.triad.com>
Followup-To: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
X-Attribution: mgg
Sender: mgg@triada.triad.com (Mark Galbraith)
Reply-To: mgg@triada.triad.com
Organization: Triad Systems, Livermore CA
References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU>
 <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com>
 <3bg70j$78h@zikzak.apana.org.au> <3bge0d$p7p@golf.ustores.missouri.edu>
 <gburnoreD027BL.9nD@netcom.com> <3bhsto$s69@wrdis02.robins.af.mil>
Date: Wed, 30 Nov 1994 22:11:42 GMT
X-Mailer: Emacs-19.27
X-Phone: +1 510 449 0606 x6513
Lines: 19

Reply to Parent Message