Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Sep 1998 10:45:50 -0700
From:      "Jordan K. Hubbard" <jkh@time.cdrom.com>
To:        026809r@dragon.acadiau.ca (Michael Richards)
Cc:        security@FreeBSD.ORG
Subject:   Re: cat exploit 
Message-ID:  <17574.905449550@time.cdrom.com>
In-Reply-To: Your message of "Thu, 10 Sep 1998 13:14:53 -0300." <199809101614.NAA07518@dragon.acadiau.ca> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Is it just me or did everyone miss the point of Jay's message?

The problem is that Jay's message didn't actually have a point. :)

Rather, it described a symtom common to most VT100 compliant terminal
emulators and something very clearly under the "well don't DO that then"
category.  It's nothing new at all and if you're not sure of the
contents of a file, don't just blindly cat it to your screen.  The
same goes for any binary I might hand you - if I put up a file on
an FTP site called ``megaspacewar.exe'' and you go and run it on your
Windows box and it trojans you to death (or worse), who's fault is
that? :-)  Same basic issue.

- Jordan

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17574.905449550>