🚀 go-pugleaf

In article <40iodk$p3@nntp.ucs.ubc.ca> Eric Gisin, ericg@unixg.ubc.ca
writes:
>>Aron S. Spencer <aspencer@nando.net> wrote:

[snip]

>>Obviously, you have no concept of network security.
>Every credible report of what Registration Wizard does indicates that
>it is a client, not a server. The user has to press the button to send
>out the information, Microsoft or some cracker can't send a message
>to Windows 95 and request the information from your computer.

>Eric Gisin, ericg@unixg.ubc.ca

Sigh... Some people just don't get it. The short version: buttons are
very simple to automate. The longer version:

   1) The RW collects information about the system it is installed on.
   2) This information can be sent to MSN by the RW.
   3) It would be really easy to hack:
      a) the registration flags that tell RW whether it needs to
gather/send information.
      b) the phone number/network address the information is sent to.
      c) which file that is sent.
   4) Although many of these capabilities have been present in the past
they have not been built in to the operating system, providing a
standardized back door.

Who was it you said has no concept of network security?

Aron S. Spencer
Radix Consulting

(919) 596-0152 Voice
(919) 596-0081 Fax
aspencer@nando.net
AOL: Asspencer
CIS: 75407,125