home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: alt.hackers
- Path: sparky!uunet!europa.asd.contel.com!darwin.sura.net!wupost!zaphod.mps.ohio-state.edu!sol.ctr.columbia.edu!csa!kibirev
- From: kibirev@csa.bu.edu (oleg kibirev)
- Subject: Re: Debugging program on mailing machine
- Organization: Computer Science Department, Boston University, Boston, MA, USA
- Originator: kibirev@csa
- References: <1992Jul25.012355.11106@ctr.columbia.edu> <6NQHY31@taronga.com>
- Message-ID: <1992Jul27.043409.13221@ctr.columbia.edu>
- Sender: news@ctr.columbia.edu (The Daily Lose)
- Approved: The King Of Flame Wars
- Date: Mon, 27 Jul 1992 04:34:09 GMT
- X-Posted-From: csa.bu.edu
- X-Posted-Through: sol.ctr.columbia.edu
- Lines: 39
-
- In article <6NQHY31@taronga.com> peter@taronga.com (Peter da Silva) writes:
- >In article <1992Jul25.012355.11106@ctr.columbia.edu> kibirev@csa.bu.edu (oleg kibirev) writes:
- >>As I already mentioned in some ObHack, I am writing a program to allow access
- >>to Internet host (shell, maybe even line editor like ed(1)) via e-mail only
- >
- >Wow. You're showing anyone who can read the mail spool on half a dozen systems
- >how to execute any arbitrary program on your account, with your password in
- >plaintext no less!
- >
- Wow. Mr. Peter da Silva is flaming every article in alt.hackers,
- alt.hackers.malicious, comp.unix.wizards and probably more without
- ever posting his own hack. Or suggesting a better alternative to what
- he flames. I suggest an addition to FAQ: no flame without ObHack.
-
- I think, consulting crypt(1) and uuencode(1) should enlighten someone
- how to avoid sending text password. There are also other methods. For
- example, you can use a random number generator with large period and
- initial salt known by both sender and recipitant to provide unique
- indentification for each message (server can compensate for lost mail
- by looking a few numbers ahead). Oops, sorry, I don't think improving
- system security is the best subject for this group...
-
- Bthw, how does one read /var/spool/mqueue without becoming root first?
-
- >Shouldn't this be in alt.hackers.malicious? :->
-
- Oh yes, ObHack: alt.hackers.malicious is no longer moderated.
- Special thanks for a person who explained that I need to post control.
-
- >--
- > `-_-'
- > Have you hugged your wolf today? 'U`
- >
- >Peter da Silva, Taronga Park BBS, Houston, TX +1 713 568 0480/1032
-
- The sig very approporiate for flames, isn't it? :)
-
-
-
-