NetNews Usenet Archive 1992 #16/NN_1992_16.iso/spool/comp/security/misc/813

Internet Message Format | 1992-07-25 | 1.6 KB

Path: sparky!uunet!cis.ohio-state.edu!ucbvax!agate!alanc
From: [e-mail] (Alan Coopersmith)
Newsgroups: comp.security.misc
Subject: Re: System "pleasure.com"
Message-ID: <[e-mail]>
Date: 25 Jul 92 05:38:15 GMT
References: <[e-mail]> <[e-mail]>
Organization: U.C. Bezerkeley Overloaded Computing Facility
Lines: 26
NNTP-Posting-Host: hailstorm.berkeley.edu

In article <[e-mail]> [e-mail] (Noah White) writes:
)In article <[e-mail]> [e-mail] (Brian 'Doc' O'Neill) writes:
)>
)>This site appears to a BBS for erotica gifs and such, which may violate some
)>of the regulations of some networks. Apparently a user can have that system
)>ftp files to their own account, which is why I see the FTP connections.
)>however I am concerned about the methods used to do this, as it may require
)>the divluging of the users password.
)>
)
)Oh well oh it does not require divulging
)passwords because the SYSADMIN there is the one who takes the FTP requests.

Wait a minute...if I log in to pleasure.com and ask the sysadmin to put a
file in my account here, how is he going to get into my account here without
divulging my password?  Or am I misunderstanding what's happening?

)----
)I hope our stupid inews likes the amount of "new" text this time.

(Try replacing the >'s at the beginning of the line with something else, say
}'s or )'s....)
--
------------------------------------------------------------------------
Alan Coopersmith            Internet: [e-mail]
University of California, Berkeley    Bitnet:   [e-mail]