Re: Gates of Hell

Jan Vroonhof (vroonhof@math.ethz.ch)
13 Aug 1999 19:06:22 +0200


"Robert G. Brown" <rgb@phy.duke.edu> writes:

> Well, let's be less knee-jerk biased about this. As far as the network
> is concerned, Win9X is nearly perfectly secure because they have an
> outgoing-only sort of network. Can one crack a Win9X box on the
> network? I doubt it

It depends of course on what your definition of "on the network" is.
Do you read comp.risks? Some Win9x machines come with preinstalled
ActiveX components that are exploitable. Several versions of MTA's
have MIME overflows etc. Then there is of course the trojan horses,
macro virusses etc that are not a monopoly of Win9x but are certainly
more widespread there.

Win9x machines are opening up towards the net and their current track
record isn't very good either. Has anybody ever checked those networks
aware games for overflows?

If Barclays is really that concerned about password theft they should
use technology that doesn't require you to use enter a password
directly into the computer at all, such as a separate "calculator".
My bank does.

Jan

-- 
Jan Vroonhof                    http://www.math.ethz.ch/~vroonhof/
Mathematik,                               vroonhof @  math.ethz.ch
HG E16, ETH-Zentrum,                      Tel: +41-1-6325456/25154
Raemistrasse 101, CH-8092 Zuerich.              Fax: +41-1-6321085

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/