Re: security concerns revisted

Article View: comp.sys.sgi.admin

Article #95

Back to comp.sys.sgi.admin Previous Next

#95

From: Paul Olbrich
Date: Thu, 07 Jan 1993 00:39

27 lines
1728 bytes

In article <C0GEH4.2KJ@helios.physics.utoronto.ca>, sysmark@helios.physics.utoronto.ca (Mark Bartelt) writes:
>
>  ...
>
> Password-free accounts, and pointing people toward permissive tftpd, seem
> like poor ideas.  And commenting that the potential pitfalls are covered
> in the documentation strikes me as a bit of a cop-out.
> 
> ( Don't take any of this personally, Dave; we *do* love you! :-)
> 
> Mark Bartelt                                                416/978-5619
> Canadian Institute for                             mark@cita.toronto.edu
> Theoretical Astrophysics                           mark@cita.utoronto.ca
> 
> "Clothes not busy being worn are busy drying."  -  Dylan, on laundry day
>           [ singing "It's all right, ma (I'm only bleaching)" ]

Also, /usr/lib/X11/xdm/Xsession by default has a line in
it that says "/usr/bin/X11/xhost +" which allows clued individuals
to write X clients that monitor that machine's keystrokes
across the net.

Other workstation vendors that I am familiar with appear to
default to "xhost -".

Drew Olbrich
drew@cs.cmu.edu

Technical Details

Message-ID: <C0GKHt.18s.2@cs.cmu.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!ogicse!das-news.harvard.edu!cantaloupe.srv.cs.cmu.edu!H.GP.CS.CMU.EDU!drew

References:

<1992Dec24.193457.16465@u.washington.edu> <C0G7I2.JM3@helios.physics.utoronto.ca> <ui2dla0@zuni.esd.sgi.com> <C0GEH4.2KJ@helios.physics.utoronto.ca>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!ogicse!das-news.harvard.edu!cantaloupe.srv.cs.cmu.edu!H.GP.CS.CMU.EDU!drew
From: drew+@CS.CMU.EDU (Paul Olbrich)
Newsgroups: comp.sys.sgi.admin,comp.sys.sgi
Subject: Re: security concerns revisted
Message-ID: <C0GKHt.18s.2@cs.cmu.edu>
Date: 7 Jan 93 00:39:28 GMT
Article-I.D.: cs.C0GKHt.18s.2
References: <1992Dec24.193457.16465@u.washington.edu> <C0G7I2.JM3@helios.physics.utoronto.ca> <ui2dla0@zuni.esd.sgi.com> <C0GEH4.2KJ@helios.physics.utoronto.ca>
Sender: news@cs.cmu.edu (Usenet News System)
Organization: Carnegie Mellon University
Lines: 27
Nntp-Posting-Host: h.gp.cs.cmu.edu

Reply to Parent Message