Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!zaphod.mps.ohio-state.edu!rpi!sci.ccny.cuny.edu!sci.ccny.cuny.edu!jeffrey
From: jeffrey@sci.ccny.cuny.edu (Jeffrey L Bromberger)
Newsgroups: comp.sys.3b1
Subject: Failure of iswind()
Summary: iswind fails miserably!
Message-ID: <1991May24.203238.7990@sci.ccny.cuny.edu>
Date: 24 May 91 20:32:38 GMT
Sender: jeffrey@sci.ccny.cuny.edu (Jeffrey L Bromberger)
Reply-To: jeffrey@sci.ccny.cuny.edu (Jeffrey L Bromberger)
Followup-To: comp.sys.3b1
Organization: City College of New York - Science Computing Facility
Lines: 24

Just for fun, I tried the following command from my VAX to my
ethernet'ted 3b1:

% rsh notvax /usr/games/klondike

Now, considering the fact that I'm not logged in on the console, this
should fail.  This game, like many others, use iswind() to see if I'm
on the bitmapped screen.  The logic should stop me if I'm not.
But, it doesn't!  It overwrites the console display (without regard as
to what or who is going on) with the game screen!

Any idea why all these games (klondike/mahjongg/rocks/bugs) all have
this behavior?  Is it only seen when using the ethernet package?  Does
this happen if someone dials in via the OBM?  Is iswind() just plain
drain-bamaged?

Isn't this some bizarre sort of security hole?!?

j
-- 
Jeffrey L. Bromberger
System Operator---City College of New York---Science Computing Facility
jeffrey@sci.ccny.cuny.edu			jeffrey@ccnysci.BITNET
	Anywhere!{cmcl2,philabs,phri}!ccnysci!jeffrey