Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #80

Back to comp.security.unix Previous Next

#80

From: Pete Hartman
Date: Thu, 01 Dec 1994 16:57

23 lines
2236 bytes

mgg@triada.triad.com (Mark Galbraith) writes:
>I think what we need is some cryptography.  8lgm could encrypt the
>exploit script, and then provide the decryption key to verified sysadms.

And how do you propose they verify them?

And how do you make sure they only give the key to verifiably trusted
people?

I can't see that working.

>One way I can think of to verify these people is to only send the key to
>people listed as the technical or administrative point of contact for
>a domain, as shown by the WHOIS command.  I know this is not
>foolproof, but it's better than what we have right now, which is *NO*
>information at all about this bug.

I suppose that might work.  But still, once the keys are out, people
will start trading them, et voila you have the same situation where
the crackers get the info too.
-- 
Pete Hartman		       Bradley University	pwh@bradley.bradley.edu
 I fear we have not gotten rid of "God" because we still have faith in grammar

Technical Details

Message-ID: <3bkv9t$4r5@bradley.bradley.edu>

Path:

arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!vixen.cso.uiuc.edu!rhf.bradley.edu!bradley.bradley.edu!not-for-mail

References:

<8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU>  <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com>  <3bg70j$78h@zikzak.apana.org.au> <3bge0d$p7p@golf.ustores.missouri.edu>  <gburnoreD027BL.9nD@netcom.com> <3bhsto$s69@wrdis02.robins.af.mil> <MGG.94Nov30141142@triada.triad.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-ArrivalTime: 1994-12-01 09:22:55 PST
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!vixen.cso.uiuc.edu!rhf.bradley.edu!bradley.bradley.edu!not-for-mail
From: pwh@bradley.bradley.edu (Pete Hartman)
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
Date: 1 Dec 1994 10:57:33 -0600
Organization: Bradley University
Lines: 23
Distribution: usa
Message-ID: <3bkv9t$4r5@bradley.bradley.edu>
References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU>  <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com>  <3bg70j$78h@zikzak.apana.org.au> <3bge0d$p7p@golf.ustores.missouri.edu>  <gburnoreD027BL.9nD@netcom.com> <3bhsto$s69@wrdis02.robins.af.mil> <MGG.94Nov30141142@triada.triad.com>
NNTP-Posting-Host: bradley.bradley.edu

Reply to Parent Message