Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!yetti!geac!daveb From: daveb@geac.UUCP Newsgroups: news.admin,misc.legal Subject: Re: A challenge for those who believe that the network has security Message-ID: <1668@geac.UUCP> Date: Fri, 23-Oct-87 09:17:15 EST Article-I.D.: geac.1668 Posted: Fri Oct 23 09:17:15 1987 Date-Received: Sun, 25-Oct-87 10:44:29 EST References: <3947@watdcsu.waterloo.edu> <4000@watdcsu.waterloo.edu> Reply-To: daveb@geac.UUCP (Dave Collier-Brown) Organization: The little blue rock next to that twinkly star. Lines: 31 Xref: yetti news.admin:1079 misc.legal:2387 In article BOGUS-near-clyde writes: >I challenge him (Mike Gore) to figure out where this article originated from, >where it was inserted into the network, and who really wrote it in >the first place. I believe that the network does not have sufficient >audit trails to make this possible. ># Mike Gore ># Institute for Computer Research. ( watmath!mgvax!root - at home ) ># These ideas/concepts do not imply views held by the University of Waterloo. This network not only has enough audit trails to trace back the author to a site/person having news capabilities at clyde, it also provides a subset of these audit trails to every recipient. The path taken to reach this site (2 hops away from watmath) was [pseudo-watmath] -> clyde -> cbosgd -> ihnp4 -> homxb -> ho95e -> rutgers -> husc6 -> uunet -> mnetor -> utzoo -> yetti -> geac Have a look at the usenet map... I usually talk to watmath via yetti. If the forger was particularly bright, he may have placed an arbitrarily long psuedo-path in front of the site he used to send the forgery, so it behooves the mail administrators of sites on this path to check their logs and news articles. --dave (hi mikey!) c-b -- David Collier-Brown. {mnetor|yetti|utgpu}!geac!daveb Geac Computers International Inc., | Computer Science loses its 350 Steelcase Road,Markham, Ontario, | memory (if not its mind) CANADA, L3R 1B3 (416) 475-0525 x3279 | every 6 months.