Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!purdue!haven!mimsy!mojo!stripes From: stripes@eng.umd.edu (Joshua Osborne) Newsgroups: comp.windows.x Subject: Re: I'm sure you all know... Message-ID: <1990Feb10.110018.26564@eng.umd.edu> Date: 10 Feb 90 11:00:18 GMT References: <1990Feb8.211508.2581@uokmax.uucp> Sender: news@eng.umd.edu (The News System) Organization: Maryversity of Uniland, College Park Lines: 16 In article <1990Feb8.211508.2581@uokmax.uucp> randy@uokmax.ecn.uoknor.edu (Longshot) writes: >This is a potential problem, and I'm sure I'm not the first to find it: You arn't, and this isn't the worse (be clever... read the man pages for xterm). [...] >Needless to say, if you are on a host that is trusted to an X server, this >small segment can wreck them. [...] Don't trust any hosts. Get X11R4 and use MIT-COOKIE-1 (you need to start X with the -auth option, and use xauth, or the Xau lib functions to make yourself a .Xauthority file). Then you only need to trust 2 people, you and root. -- stripes@wam.umd.edu "Security for Unix is like Josh_Osborne@Real_World,The Mutitasking for MS-DOS" "The dyslexic porgramer" - Kevin Lockwood Who needs friends when you can sit alone in your room and drink?