Bugtraq mailing list archives

Re: FreeBSD VM gremlin

From: james () APLDIGITAL COM AU (James McParlane)
Date: Mon, 21 Sep 1998 11:33:11 +1000


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/plain;
        charset="iso-8859-1"

Sounds like we all need EIT :)

http://pobox.upenn.edu/~tex/papers/thesis/index.html

-----Original Message-----
From: Charles M. Hannum [mailto:root () IHACK NET]
Sent: Friday, September 18, 1998 9:49 PM
To: BUGTRAQ () NETSPACE ORG
Subject: Re: FreeBSD VM gremlin

You should have md5 checksums of files that you are concerned about,
as timestamps are useless in the face of a good attacker.


Rubbish!  A checksum doesn't tell me that someone hadn't temporarily
replaced the file and has now put the original back.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">

<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2232.0">
<TITLE>RE: FreeBSD VM gremlin</TITLE>
</HEAD>
<BODY>


<FONT SIZE=3D2>Sounds like we all need EIT :) </FONT>
</P>


<FONT SIZE=3D2><A =
HREF=3D"http://pobox.upenn.edu/~tex/papers/thesis/index.html"; =
TARGET=3D"_blank">http://pobox.upenn.edu/~tex/papers/thesis/index.html</=
A></FONT>
</P>


<FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Charles M. Hannum [<A =
HREF=3D"mailto:root () IHACK NET">mailto:root () IHACK NET</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Friday, September 18, 1998 9:49 PM</FONT>
<BR><FONT SIZE=3D2>To: BUGTRAQ () NETSPACE ORG</FONT>
<BR><FONT SIZE=3D2>Subject: Re: FreeBSD VM gremlin</FONT>
</P>


<FONT SIZE=3D2>> You should have md5 checksums of files that you =
are concerned about,</FONT>
<BR><FONT SIZE=3D2>> as timestamps are useless in the face of a good =
attacker.</FONT>
</P>


<FONT SIZE=3D2>Rubbish!  A checksum doesn't tell me that =
someone hadn't temporarily</FONT>
<BR><FONT SIZE=3D2>replaced the file and has now put the original =
back.</FONT>
</P>

</BODY>
</HTML>

------_=_NextPart_001_01BDE4FF.CECAE03C--

Current thread:

Re: FreeBSD VM gremlin Charles M. Hannum (Sep 18)
- Re: FreeBSD VM gremlin Warner Losh (Sep 18)
  - Re: FreeBSD VM gremlin Harhalakis Stefanos (Sep 19)
- RedHat's RealServer. Jason Aras (Sep 18)
- <Possible follow-ups>
- Re: FreeBSD VM gremlin der Mouse (Sep 19)
- Re: FreeBSD VM gremlin James McParlane (Sep 20)