Xref: utzoo comp.unix.wizards:25715 alt.security:2603
Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!spool.mu.edu!cs.umn.edu!msi.umn.edu!noc.MR.NET!news.stolaf.edu!thor.acc.stolaf.edu!seebs
From: seebs@thor.acc.stolaf.edu (The Laughing Prophet)
Newsgroups: comp.unix.wizards,alt.security
Subject: Re: BSD tty security, part 3: How to Fix It
Message-ID: <1991May22.070722.1231@news.stolaf.edu>
Date: 22 May 91 07:07:22 GMT
Article-I.D.: news.1991May22.070722.1231
References: <7299:Apr2510:22:2091@kramden.acf.nyu.edu> <12535@dog.ee.lbl.gov> <15896:Apr2714:35:3991@kramden.acf.nyu.edu> <1991May9.145536.20002@odin.diku.dk>
Sender: news@news.stolaf.edu
Reply-To: seebs@thor.acc.stolaf.edu (The Laughing Prophet)
Organization: SporkMungus
Lines: 43

In article <1991May9.145536.20002@odin.diku.dk> bombman@diku.dk (Hans-Henrik St{rfeldt) writes:
>Another problem pops up, using write with X-windows, it is possible to hide
>yourself entirely, from the person you write to. This is done by making a
>'non-login-shell' from your mail session (xterm). Then you can write to other
>users, who gets following message:

>Message from ???@freja on ttyp7 at 10:24 ...
>typed message here....
>EOF

Hmm... I know a way, on most unix systems, to duplicate this wrt a
normal user (i.e., someone who doesn't quite have the background to
use 'ps' instinctively)...

write <foo>
<type message here>
<*type* "EOF">
^Z out of the job and wait. About 5 minutes later, they will have forgotten
about you. Then, fg the job, and:
^V^GMessage from root@gopher.rodent.generic.com on ttyl4 at 16:32 ...
>type message here<
EOF

and repeat as often as desired. Most people will be fooled by this
one...

And I have *no* idea how to stop it in any reasonable way.

>--Hans Henrik Staerfeldt
>ps. I am a user, not a sysop

Hmm. I sort of run a NeXT, but really I'm just a user. I want to be
a sysop some day, though...

> // .|{}|         Bombman@freja.diku.dk                     |
>/-|  |__|         Hans Henrik Staerfeldt                    |

--SeebS--
--
Peter Seebach - The Laughing Prophet     |     |        Anonymous Posting Here!
I don't speak for St. Olaf, St. Olaf     |     |           seebs@acc.stolaf.edu
doesn't speak for me, and Marcel Marceau |     | "Forgive them Father, for they
speaks for no one.                       |     |        do not get the joke..."