From owner-freebsd-security Fri Jan 28 3:14:43 2000 Delivered-To: freebsd-security@freebsd.org Received: from phoenix.welearn.com.au (phoenix.welearn.com.au [139.130.44.81]) by hub.freebsd.org (Postfix) with ESMTP id 8030E14F4C; Fri, 28 Jan 2000 03:14:33 -0800 (PST) (envelope-from jon@phoenix.welearn.com.au) Received: (from jon@localhost) by phoenix.welearn.com.au (8.9.3/8.9.3) id WAA51903; Fri, 28 Jan 2000 22:08:24 +1100 (EST) (envelope-from jon) Date: Fri, 28 Jan 2000 22:08:22 +1100 From: Jonathan Michaels To: Warner Losh Cc: Kris Kennaway , Masafumi NAKANE , serg@dor.zaural.ru, freebsd-security@FreeBSD.ORG, freebsd-bugs@FreeBSD.ORG Subject: Re: delegate buffer overflow (ports) Message-ID: <20000128220819.A51839@phoenix.welearn.com.au> Mail-Followup-To: Warner Losh , Kris Kennaway , Masafumi NAKANE , serg@dor.zaural.ru, freebsd-security@FreeBSD.ORG, freebsd-bugs@FreeBSD.ORG References: <200001280936.CAA60674@harmony.village.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.4i In-Reply-To: <200001280936.CAA60674@harmony.village.org>; from Warner Losh on Fri, Jan 28, 2000 at 02:36:54AM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org all, On Fri, Jan 28, 2000 at 02:36:54AM -0700, Warner Losh wrote: > In message Kris Kennaway writes: > : ************************************** > : ** WARNING!!! WARNING!!! WARNING!!! ** > : ************************************** > : > : THIS PORT CONTAINS KNOWN SECURITY HOLES WHICH ALLOW A REMOTE ATTACKER TO > : EASILY TAKE CONTROL OF YOUR MACHINE. YOU INSTALL THIS PORT AT YOUR OWN > : RISK!! DON'T COME CRYING TO US IF YOU GET ROOTED BECAUSE OF INSTALLING > : THIS PORT. > : > : Do you want hackers to be able to take remote control of your > : machine? (y/N): generally ok, but ... i have no probelms with hackers, hell i used to be an os9 hacker and started learing the ropes of qnx hacking. on the other hand i do have serious problems with criminals using my computer to create problems for other people. maybe the word to be used should be "crackers" or just call them what they are "computer criminals" but, please not "hackers". hacking is a long and proud tradition that has given us many computer hardware and software inovations of teh past 35 to seventy or so years .. right back to the early twenties when german scientists gave teh world the first functionally usable devices that we now call digit computers. sorry, i'll get back under my rock .. regards jonathan -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message