Re: Security aspects of Timbuktu Look@Me?

To: riddle@is.rice.edu
Subject: Re: Security aspects of Timbuktu Look@Me?
From: mrm@doppio.Eng.Sun.COM (Marianne Mueller)
Date: Wed, 17 Jul 1996 15:11:20 -0700
CC: www-security@ns2.rutgers.edu
In-reply-to: <199607151735.MAA18559@is.rice.edu> (message from Prentiss Riddle on Mon, 15 Jul 1996 12:35:50 -0500 (CDT))

Well this got my attention :-) 

Turns out that if some group of people all voluntarily install the
Look@Me program on their system, then, they can use it as a kind of
consensual chat area.  Also, it's not just an applet, it's an applet
with a Netscape plug-in.

If people want to install software so that they can do internet
teleconferencing, this seems perfectly reasonable to me.  

The main problem is that the Look@Me program keeps causing browsers to
core dump.  I don't know if the Look@Me program is at fault, or the
browsers.

Marianne
JavaSoft security

References:

Security aspects of Timbuktu Look@Me?

From: Prentiss Riddle <riddle@is.rice.edu>