Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.1 6/24/83; site ncsu.UUCP Path: utzoo!watmath!clyde!burl!ulysses!bellcore!decvax!ittatc!dcdwest!sdcsvax!ncr-sd!ncrcae!ncsu!hes From: hes@ncsu.UUCP (Henry Schaffer) Newsgroups: net.crypt Subject: Re: Dialback (Re: Re: foiling password crackers) Message-ID: <3056@ncsu.UUCP> Date: Sun, 16-Mar-86 14:05:17 EST Article-I.D.: ncsu.3056 Posted: Sun Mar 16 14:05:17 1986 Date-Received: Wed, 19-Mar-86 00:46:41 EST References: <974@decwrl.DEC.COM> <262@birtch.UUCP> Organization: N.C. State University, Raleigh Lines: 7 There was a discussion last year in either net.dcom or fa.telecom on methods of beaking into dialback (without physical access.) They mostly related to the window in which an incoming call may be received by the line being used for dialback. If the cracker then plays a dial-tone, the dialback site can be convinced that it has reached its intended number. (I don't have the article to repost.) --henry schaffer n c state univ