Path: utzoo!utgpu!news-server.csri.toronto.edu!clyde.concordia.ca!uunet!wuarchive!mailrus!accuvax.nwu.edu!nucsrl!telecom-request
From: mtv@milton.u.washington.edu (David Schanen)
Newsgroups: comp.dcom.telecom
Subject: Re: Len Rose Indictment
Message-ID: <10772@accuvax.nwu.edu>
Date: 12 Aug 90 22:18:48 GMT
Sender: news@accuvax.nwu.edu
Organization: Independent Study of Art, Music, Video, Computing
Lines: 15
Approved: Telecom@eecs.nwu.edu
X-Submissions-To: telecom@eecs.nwu.edu
X-Administrivia-To: telecom-request@eecs.nwu.edu
X-Telecom-Digest: Volume 10, Issue 564, Message 3 of 12


   I noticed that the indictment of Len Rose includes mention of a
Trojan that collects root passwords.  It seems to me that you have to
have root to install such a trojan.  Am I missing something here?


Dave

Internet: mtv@milton.u.washington.edu  *  UUNET: ...uunet!uw-beaver!u!mtv


[Moderator's Note: You do have to be root, but some sysadmins would
probably install the mods inadvertently, and there are some other
folks with the root password who would install the code secretly
merely to gather additional passwords for use as needed.  PAT]