🚀 go-pugleaf

This week on COPS on NeXT...Federal agents tap in to all the public window
servers in the country and gather evidence that leads to the bust of an
indoor marijuana farm in a student's 500 sq.ft. apartment; street value:
$5,000,000.  

Bad Boys, Bad Boys, Whatchagonnado?










































all suspects are innocent until blah blah blah.
-- 
David Basiji 
"C neophyte, Bioengineering Grad Student, Internet Personality"

email: basiji@u.washington.edu          
NeXTmail: basiji@larry.pathology.washington.edu

		"Whining is just anger coming out of a very small hole."
            --Stuart Smalley

In article <1992Aug14.223854.23396@magnus.acs.ohio-state.edu>  
phayes@magnus.acs.ohio-state.edu (Patrick W Hayes) writes:
> Does anyone use the COPS security checker on the NeXT? What version do  
you
> use, and how well do you think it knows what its doing on the NeXT?


 I run it weekly on my NeXT network here. I'm not sure of the version, the  
README only has the following info:

   dan farmer
   January 31, 1989

So it seems quite old. It is NeXT aware, though. It only has problems with  
recognizing that sticky bits on directories do not imply security holes.

	- Jiro
-- 
Jiro Nakamura				jiro@shaman.com (NeXTmail)
NeXTwatch / Technical Editor		76711,542 (CIS)
The Shaman Group			+1 607 277-1440 (Voice/Fax)

>In article <1992Aug14.223854.23396@magnus.acs.ohio-state.edu>  
>phayes@magnus.acs.ohio-state.edu (Patrick W Hayes) writes:
>> Does anyone use the COPS security checker on the NeXT? What version do  
>you
>> use, and how well do you think it knows what its doing on the NeXT?

You can ftp the latest version (1.04) from uxc.cso.uiuc.edu in /pub.  It
knows about NeXTs and it knows to check for many security holes that
have been fixed via CERT advisories.  Get and install perl
(available in that same directory) and use the perl version that
comes in the same cops distribution, it is faster.

Also, crack is in that same directory and is quite useful if you run
a machine which lots of people use.  Compiles just fine on NeXT.
-- 
David Lemson                                                 (217) 244-1205
University of Illinois NeXT Campus Consultant  / CCSO NeXT Lab System Admin
Internet : lemson@uiuc.edu                 UUCP :...!uiucuxc!uiucux1!lemson 
NeXTMail accepted                                   BITNET : LEMSON@UIUCVMD

In article <Bt3oLt.KKK@ux1.cso.uiuc.edu> lemson@ux1.cso.uiuc.edu (David Lemson) writes:
>Also, crack is in that same directory and is quite useful if you run
>a machine which lots of people use.  Compiles just fine on NeXT.

If you're using Crack on your NeXT, I sure hope that you're doing a
  nidump before running it over the password file.

Also, several other security holes on the NeXT can't be fixed without
  getting source to hack at. And NeXT doesn't provide these to anyone. foo!

	-Heiji
	 "All my nightmares involve Netinfo."
-- 
===========================================================================
 Mr. Heiji Horde    (Non NeXT mail only please)     e-mail: horde@reed.edu
   All insane acts are done in affiliation with Madd Hacker Enterprises
               Disclaimer: Sanity. Never had it. Never will.

In article <1992Aug14.223854.23396@magnus.acs.ohio-state.edu> phayes@magnus.acs.ohio-state.edu (Patrick W Hayes) writes:
>Does anyone use the COPS security checker on the NeXT? What version do you
>use, and how well do you think it knows what its doing on the NeXT?

I have made some patches for the NeXT to p[erl]-COPS (1.04), so it uses
NetInfo to get password and group information, and a few other fixes. I
sent the diffs to Dan Farmer about a month ago. You will need Larry
Wall's perl to run these, but if you're interested, I can send the
diffs to you, as well.

Have fun!
- Apostolos
-- 
	 lytras@ifi.unizh.ch   		|   Apostolos Lytras
	 lytras@avalon.physik.unizh.ch	|   Informatik Club der Uni
	 lytras@amiga.physik.unizh.ch  	|   Zuerich, SysAdmin