Re: [MobProg] Major Security Hole!!!

From: Franco Gasperino (awe@CET.COM)
Date: 10/08/97


I think what he meant was to continue on with his childish, moronic
arguements, applying them to other topics brought up....


                       Franco Gasperino
                       Cutting Edge Communications, Inc.
                       509-444-INET
                       awe@cet.com

On Wed, 8 Oct 1997, Ron Hensley wrote:

> > <TONGUE IN CHEEK>
> > This is not a security hole. It's a feature. When you say it's a security
> > hole you're suggesting it should be fixed. However, some people may
> > want this behavior of MobProgs. Anyhow, we all know it's proper to
> > change the policy not recode MobProgs. Policy not code... you can't
> > code ethics.
> > </TONGUE IN CHEEK>
>
> Id have to disagree here. I dont see how anything that could let someone
> I grant bottom imm level building status, potentially edit a mob, that
> can then be used to advance themselves to IMPL could be called a feature
> and not be taken as a security hole.
>
> One might also remove the checks on the unix passwd program, the changing
> anyones password but themselves, require root or wheel access, and write
> up a nice motd that states to change roots passwd and login as root as a
> nono, so please dont do it ....?!?!?!
>
>
>     *******************************************************************
>     *   Ron Hensley                     ron@dmv.com                   *
>     *   Network Administrator           http://www.dmv.com/~ron       *
>     *                                   PGP Key at WWW Page           *
>     *   DelMarVa OnLine                 749-7898 Ext. 403             *
>     *******************************************************************
>
>
>      +------------------------------------------------------------+
>      | Ensure that you have read the CircleMUD Mailing List FAQ:  |
>      | http://democracy.queensu.ca/~fletcher/Circle/list-faq.html |
>      +------------------------------------------------------------+
>


     +------------------------------------------------------------+
     | Ensure that you have read the CircleMUD Mailing List FAQ:  |
     | http://democracy.queensu.ca/~fletcher/Circle/list-faq.html |
     +------------------------------------------------------------+



This archive was generated by hypermail 2b30 : 12/08/00 PST