HDTenEightyP/NetNews huggingface dataset:
From: kwan@netcom.com (Kwan-Seng Low)
Subject: security: ipfiltering? fake ip?
Followup-To: poster
Keywords: security, ip-filtering
Organization: Netcom - Online Communication Services  (408 241-9760 guest) 
Date: Wed, 13 Jan 1993 03:17:08 GMT

Forgive me for asking this naive question:
I've enable ip-pkt-filtering on incoming traffic from internet.
My question: how secure is this scheme? could someone fake an trusted ip addr and gain access to my site?
I know if you have a duplicate ip addr on LAN, you'll get a dup ip messages,
both hosts will freeze-up. Is that true on internet?

Kwan
kwan@osc.versant.com

reply me on email. Thanks
Newsgroups: comp.security.misc
From: stubaker@casbah.acns.nwu.edu (Stuart Baker)
Subject: Trash Disabler
Organization: Northwestern University, Evanston Illinois.
Date: Mon, 11 Jan 1993 19:38:25 GMT


I know this may not be the appropriate place to post but.....

Is there a MAC program located on FTP site somewhere that will disable the
trash feature on a mac or at least password prompt the "empty" feature?  I
have a small non-networked lab that really could use a program like this to
help hackers from trashing config files, etc.  

---------------------
Stu D. Baker				Mitchell Media Center
Multimedia Services Specialist		Northwestern University Library
E-MAIL: stubaker@nwu.edu		1935 Sheridan Road.
VOICE: 708.467.1984			Evanston, Illinois   60208-2323
Newsgroups: comp.security.misc
From: cotrozzi@ghost.dsi.unimi.it (Massimo Cotrozzi)
Subject: Re: Breaking an encrypted file
Keywords: crypt, password forgotten, first words known
Organization: Computer Science Dep. - Milan University
Date: Sat, 9 Jan 1993 13:48:49 GMT

watrous@aramis.rutgers.edu (Don Watrous) writes:


>I have a user who has encrypted a file using the unix crypt program
>and then forgotten the password.  She's pretty sure she knows what the
>first line of the file looks like since it was saved mail.

>What software is available to try and decrypt the file and how much
>effort will be involved?
try Crypt Breaker's Workbench. It will need some user effort,
but since she knows what it should look like, it will be not so
difficult. Unfortunately, I don't remember where to find cbw.

Massimo
-- 
 -- Massimo Cotrozzi  Computer Science Dept. Milan Italy
            cotrozzi@ghost.dsi.unimi.it  +39-2-27201253
 #include     "std/disclaimer.h"
From: lsnyder@fig.ucsb.edu (Lowell R. Snyder,,,COMS,Undergraduate)
Newsgroups: comp.security.misc
Subject: Re: Future OS virus immunity. (repost/long)
Summary: Open system architectures
Date: 9 Jan 93 04:59:50 GMT
Organization: Wabbit Hunters of Amerwica

In article <BUHR.93Jan2004842@ccu.umanitoba.ca> buhr@umanitoba.ca (Kevin Andrew Buhr) writes:
>In article <1992Dec31.172536.16049@das.harvard.edu> adam@endor.uucp
>(Adam Shostack) writes:
>|
>|  Does anyone care to comment on why there are so many more MS-Dos
>|  viruses out there, and there doesn't seem to be any universally
>|  accepted tool (like Disinfectant) to stop viruses.  Or is this a false
>|  impression because I use a mac and have taken the time to find out
>|  about the tools available?
>
>Three factors come immediately to mind.

Mr. Shostack:

  It all boils down to an open architecture (MSDOS) versus a closed
architecture (MAC). Hell, the original Mac had a disclaimer about even
opening the case, let alone disassembling the OS. The complexity of the 
Mac OS makes it much harder to program for, whereas the simplicity of
DOS is its downfall (in more than one sense!).
------------------------------------------------------------------------------
This note prepared by Lowell "I'm never obnoxious" Snyder.  The opinions 
expressed here do not represent the opinions of any employers or organizations 
to which I am affiliated (and are probably not even mine to begin with!).
Newsgroups: comp.security.misc,comp.org.eff.talk
From: drw@paley.mit.edu (Dale R. Worley)
Subject: Re: Stupid Licenses (YUCK!)
Organization: MIT Dept. of Tetrapilotomy, Cambridge, MA, USA
	<1992Dec22.034142.14471@fsl.noaa.gov>
	<1992Dec28.002314.21233@news2.cis.umn.edu>
	<1992Dec29.002945.4377@qiclab.scn.rain.com> <bhayden.725651090@teal>
	<1992Dec31.125850.9263@qiclab.scn.rain.com>
Date: Sun, 10 Jan 1993 02:57:47 GMT

In article <1992Dec31.125850.9263@qiclab.scn.rain.com> leonard@qiclab.scn.rain.com (Leonard Erickson) writes:
   Why can't they just provide a release that fixes the old bugs without
   introducing (known) new ones?  Featurality first is the only explanation.

Look at a magazine article that compares several software packages for
the same purpose.  There are many columns noting which features it
has, and none noting how buggy it is.  Users seem to be much more
interested in featurality than bugginess, at least before they
purchase the software.

Dale

Dale Worley		Dept. of Math., MIT		drw@math.mit.edu
--
Or, in the immortal words of Socrates, "I drank WHAT?"
Newsgroups: comp.security.misc
Subject: Security related Documentation sought.
From: xtasc@levels.unisa.edu.au
Date: 5 Jan 93 22:16:31 +1030
Organization: University of South Australia

Hi All,

Our site is currently undergoing numerous upgrades to security, physical,
software and procedural. In the process, we are trying to bring our
documentation and procedures up to date, and to that end I've been
looking about for any papers in related areas.

I'd be interested to know of any sources/ftp sites for any documentation
relating to the following topics/questions -

- unix security and procedures
- vms security and procedures
- pc/mac security wrt virii etc
- network security, esp modem access and session tracking
- (generic) password security, checking, education of importance, etc.

I mention the two unix/vms in the hope that there exists some specific
info relating to these environments. In many ways we perceive education of
our users of prime importance (esp in selecting passwords), hence the
reference there.

Unfortunately policies on PD/Freeware software prevent us from implementing
many of the systems that may apon failure preclude production availability
of computing resources, however suites that simply check for obvious
problems (like some password checkers Ive heard of) would not be a problem.

Any help would be greatly appreciated, I'll summarize to the group if
appropriate !!

Please email any info to mayfield@itd.adelaide.edu.au

Rob Mayfield
(none of the above has anything to do with unisa.edu.au or adelaide.edu.au)
From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev)
Newsgroups: comp.security.misc
Subject: Re: Future OS virus immunity.
Date: 4 Jan 93 14:08:13 GMT
Reply-To: bontchev@fbihh.informatik.uni-hamburg.de
Organization: Virus Test Center, University of Hamburg

eronald@fml.tuwien.ac.at (Edmund Ronald) writes:

>   Several people remarked that virues on Unix machines were "impossible"
> because of the access control separating accounts. No one bothered to 
> remember that the past ten years have proven Unix system security to be an
> oxymoron, a topic that keeps graduate students entertained nights. In fact,

Uh, you either missed my messages or have misunderstood them...
Viruses on Unix are by no means impossible - I have one of them here,
in front of me (it's a boring shell script infector), and in fact the
first scientific experiments with viruses were made in an Unix
environment... No, my paint was that in multi-user systems (Unix being
just an example) viruses do not spread well, because the sharing is
usually limited. Of course, if one of the privileged accounts gets
infected, then the virus spreads like wildfire...

> I was interested in FUTURE systems: How might these be rendered "resistant
>  by design"?

In general, there seems to be some hope in MAC systems with object
labeling and clear distinguishment between code and data. On such
systems only a few privileged programs (compilers, linkers) are
allowed to modify the executable objects and this right is not
transferable. Even this does not make viruses on such systems
impossible (because, a compiler that compiles itself is essentially a
virus; see Thompson's lecture on trusting trust), but such systems are
much more virus-resistent.

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany
From: oleg@gd.cs.csufresno.edu
Newsgroups: comp.security.misc
Subject: Re: Trash Disabler
Date: 12 Jan 93 07:10:44 GMT
Organization: Computer Science Departement of California State University in Fresno

In article <1993Jan11.193825.29016@news.acns.nwu.edu> stubaker@casbah.acns.nwu.edu (Stuart Baker) writes:
>
>I know this may not be the appropriate place to post but.....
>
>Is there a MAC program located on FTP site somewhere that will disable the
>trash feature on a mac or at least password prompt the "empty" feature?  I
>have a small non-networked lab that really could use a program like this to
>help hackers from trashing config files, etc.  
>

I hope nobody here agrees with _this_ definition of hacker...

Oleg

>---------------------
>Stu D. Baker				Mitchell Media Center
>Multimedia Services Specialist		Northwestern University Library
>E-MAIL: stubaker@nwu.edu		1935 Sheridan Road.
>VOICE: 708.467.1984			Evanston, Illinois   60208-2323
Newsgroups: comp.security.misc
From: bontchev@fbihh.informatik.uni-hamburg.de (Vesselin Bontchev)
Subject: Re: Future OS virus immunity.
Reply-To: bontchev@fbihh.informatik.uni-hamburg.de
Organization: Virus Test Center, University of Hamburg
Date:  5 Jan 93 16:55:04 GMT

peter@ferranti.com (peter da silva) writes:

> The Amiga has even fewer viruses out than the Mac, despite some *lovely*
> hooks for viruses to hang from. It's simply a matter of popularity.

That's not true, sorry. It's exactly the other way around. There are
about 150 Amiga viruses and about 35 Mac viruses.

> UNIX viruses are by no means impossible... neither are viruses hidden in
> source code (do you REALLY read all of GCC?).

In fact, "source code viruses" already exist... even in MS-DOS. We
have here in our collection one shell script infector for Unix and
four BAT infectors for MS-DOS...

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany
Newsgroups: comp.security.misc
From: jmcarli@srv.PacBell.COM (Jerry M. Carlin)
Subject: Re: Future OS virus immunity.
Organization: Pacific * Bell
Date: Mon, 4 Jan 1993 16:39:18 GMT

In article <1993Jan3.023308.25376@Princeton.EDU> mfterman@phoenix.princeton.edu (Mutant for Hire) writes:
>... but you have to really be careful
>about programs that run setuid, protections on all files, and other such
>issues.
>
>... I do wonder how much more secure
>other OS's are, where the ability to keep a security hole quiet is a bit
>easier.

Tandam Guardian has 'progid' which is morally equivalent to setuid.
MVS has something like 'privileged libraries'. In fact, every operating
system has some form of privilege mechanism and this mechanism is subject
to the universal problem of incorrect administration.

There is no such thing as a 100%, completely secure system outside of
the one described in the FAQ (buried in concrete etc) so UNIX is as good
as (or as bad as) all the others that actually have security mechanisms
(MVS, Tandem Guardian, VMS etc). MS-DOS & Mac OS are another matter since
you don't even have file protection that's worth anything.
-- 
Jerry M. Carlin	(510) 823-2441 jmcarli@srv.pacbell.com
Alchemical Engineer and Virtual Realist
Newsgroups: comp.lsi.cad
From: tjs@earth.wustl.edu (tom sullivan)
Subject: Is there a simple layout editor for the MAC?
Organization: Washington University, St. Louis MO
Date: Tue, 5 Jan 1993 03:38:14 GMT


I use the Berkeley tools (Magic, et al.) to do layout at work.  Once
in a while, I'd like to be able to view a file or make a minor change
on my Macintosh at home. Is there a simple, preferably free or
shareware program to display/edit Magic files on a Macintosh? I know
I've tried a couple, but I don't remember what they were.

thanks,

tom sullivan
tjs@earth.wustl.edu
Organization: Ministry of Education, Computer Center NETNEWS system V2.3
Date: Sunday, 10 Jan 1993 04:40:45 EST
From: <NCKUS153@TWNMOE10.BITNET>
Newsgroups: comp.lsi.cad
Subject:    Deadline of ICCD`93 ?

Does any one know the deadline of ICCD`93?
Newsgroups: comp.lsi.cad
From: harry@neuron6.jpl.nasa.gov (Harry Langenbacher)
Subject: What do SPICE and MAGIC stand for ?
Organization: JPL Pasadena CA
Date: Thu, 7 Jan 1993 00:19:08 GMT

If anyone knows the historical origin of the names SPICE
and MAGIC I would greatly appreciate getting the information.

I say it's like asking what Langenbacher stands for, but some
bureaucrat is holding up our proposal until we can answer
the magic trivia question and put some spice into his life.
If anyone knows what beaurowcrat stands for I'd like to
know that too.

		Thanks,
			Harry

-- 
Harry Langenbacher 818-354-9513 harry%neuron6@jpl-mil.jpl.nasa.gov
Concurrent Processing Devices Group, FAX 818-393-4540
JPL,  M/S 302-231, 4800 Oak Grove Dr, Pasadena CA 91109        USA
Newsgroups: comp.lsi.cad
From: sherlock@nrtpa16.bnr.ca (Steve Holmes x4807)
Subject: Re: Destroying Xilinx FPGAs by improper configuration?
Reply-To: sherlock@bnr.ca
Organization: Bell-Northern Research, Research Triangle Park, NC
Date: Tue, 12 Jan 1993 17:46:49 GMT


I have blasted a XC3042 by misprograming it.  I was debugging
some C code to load the configuration from a microprocessor, and
apparently misprogrammed the device.  It got real hot, smelled real
bad, developed a crack on top (PQFP package), and oozed some kind
of oil out the crack.  It took be quite a while to perfect the code
and misprogrammed it many, many times but only once did it achieve 
meltdown.

I sent the part to Xilinx, they ripped it apart and told me I blew it 
up (duh). All the ground bonds were vaporized. I believe that it
was mainly due to misprogramming IO pads such that they were set
to logic low outputs. Causing the part to try to sink all the input
signals from other devices on the board.

The XC4000 series parts will prevent you from missprograming, they have
a checksum per line of data, and a CRC check that you can enable
for the whole file,  I've tried misprograming an XC4005 without success.




steve holmes                       BNR
email: sherlock@bnr.ca             Research Triangle Park, NC
Newsgroups: comp.lsi.cad
From: robert@koko.csustan.edu (Robert Zeff)
Subject: Re: spice upload
Organization: CSU, Stanislaus
Date: Wed, 6 Jan 93 14:01:57 GMT

<<I've uploaded Spice32 for Windows NT & Windows 3.1.  I've included the
 Setup and necessary files to install Win32s so that NT binaries, such
 as this version of spice, will run on your Windows 3.1 system.

 Win32s is Microsoft's DLL which allows WindowsNT binarys to run, unmodified,
 on WIndows 3.1 systems.

 Win32s is still in beta, so ypu'll want to get a fresh copy when it's
 released.

 Spice32 my port of Berkeley's Spice, version 3e2, which is a powerfull
 circuit simulator.

>>

Sorry, I forgot:
 You can get it at:
 ftp.cica.indiana.edu, /pub/pc/win3/uploads/spice4.zip

-robert

              



-- 
Robert Zeff                         (209) 577-4268 work, 577-8548 FAX


Newsgroups: comp.lsi.cad
From: odkahn@eos.ncsu.edu (OPHER DANIEL KAHN)
Subject: Help finding these papers ?
Organization: North Carolina State University
Date: Mon, 4 Jan 1993 18:38:39 GMT

Where you at one of these conferences by any chance? Our library
has neither publication (ICCD 92 is one the way, but no telling when
it will be here).  If anyone could send me a copy of these I would
appreciate it (and be glad to send a check to cover expenses):


1.  Sawkar, P. and D Thomas, "Technology Mapping for Table-Look-Up-Based
    Field Programmable Gate Arrays," ACM/SIGDA Workshop on Field
    Programmable Gage Arrays, pp. 83-88, Feb 1992.

2.  Bhat, N. and D. Hill, "Routable Technology Mapping for FPGAs","
    First Int'l ACM/SIGDA Workshop on Field Programmable Gate Arrays,
    pp. 143-148, Feb 1992.

3.  Schlag, M., J. Kong, and P. K. Chan, "Routability-Driven
    Technology Mapping for Lookup Table-Based FPGAs," Proc
    1992 IEEE International Conference on Computer Design, Oct 1992.


-- 
 Opher D. Kahn 
Newsgroups: comp.lsi.cad
From: srinivas@wolf.Princeton.EDU (Santhanam Srinivasan)
Subject: Re: What do SPICE and MAGIC stand for ?
Originator: news@nimaster
Organization: Princeton University
Date: Thu, 7 Jan 1993 01:53:46 GMT

In article <1993Jan7.001908.29093@jato.jpl.nasa.gov>, harry@neuron6.jpl.nasa.gov (Harry Langenbacher) writes:
|> If anyone knows the historical origin of the names SPICE
|> and MAGIC I would greatly appreciate getting the information. 

SPICE: Simulation Program with Integrated Circuit Emphasis

-S.S.

-- 
Dept. of EE, Computer Engg. group,      | (r) 400 D Devereux Avenue 
Princeton University                    |     Princeton, NJ 08540
Phone: (o)609-258-4108,(r)609-252-0743  | (o) 223B Engg. Quadrangle
Internet: srinivas@ee.princeton.edu     |     Princeton, NJ 08544
From: mayo@pa.dec.com (Bob Mayo)
Newsgroups: comp.lsi.cad
Subject: Re: What do SPICE and MAGIC stand for ?
Date: 7 Jan 1993 18:56:07 GMT
Organization: DEC Western Research Lab
Distribution: inet
NNTP-Posting-Host: mayo.pa.dec.com

In article <1993Jan7.015346.7803@Princeton.EDU> srinivas@wolf.Princeton.EDU (Santhanam Srinivasan) writes:
>In article <1993Jan7.001908.29093@jato.jpl.nasa.gov>, harry@neuron6.jpl.nasa.gov (Harry Langenbacher) writes:
>|> If anyone knows the historical origin of the names SPICE
>|> and MAGIC I would greatly appreciate getting the information. 
>
>SPICE: Simulation Program with Integrated Circuit Emphasis

Magic doesn't stand for anything.  If cooking up a nice meaning for magic
is necessary for your grant proprosal, the best I've heard is Manhatten
Artwork Generator for Integrated Circuits.  But that was developed after the
fact.  Magic's original name was Caddy, but was changed because a company
started by that name.  There is still at least one place in the source where
the comments refer to either caddy or .cad (now .mag) files.  AT&T sent us
a letter in 1983 telling us we were conflicting with the name of their
graphics package called magic.  We mentioned this fact at our talk at
the 1983 DAC and people in the audience gave us a long list of packages
with the name magic, going back years.  The name magic has been used
for everything from circuit extractors (at Xerox PARC, maybe?), to a
gate array cad package, to a steel mill control program used in Japan.

--Bob
Newsgroups: comp.lsi.cad
From: trevore@vast.unsw.edu.au (Trevor Elbourne (Supr. Hell) BE)
Subject: Plotting viewdraw schematics -- help needed
Organization: University of New South Wales
X-Newsreader: Tin 1.1 PL4
Date: Tue, 5 Jan 1993 02:31:35 GMT

Has anyone sucessfully produced a postscript or plotter compatible
plot file from a viewdraw schematic. I have been trying desperately
for weeks but have been unsucessfull. When I try plotting from inside
viewdraw I get the error message "Placer: Plotter can't open pcf". I
then tried producing the plot files by hand by calling plotter myself,
this only produces a 2K postscript files (mostly headers and
formatting info). The meta file seems to be ok, it just wont produce
sensible postscipt or HP plotter output.

Any help would be very appreciated. Thanks,
Trevor.

--
"Let me be the first to offer you my sincerest contrafibularities."
	- E. Blackadder

Trevor Elbourne 			VLSI and Systems Tecnology (VaST) lab
trevore@vast.unsw.edu.au                Dept of Computer Science & Engineering
trevore@cs.unsw.oz.au                   University of New South Wales
From: rv@cs.brown.edu (rodrigo vanegas)
Newsgroups: comp.lsi.cad
Subject: Looking for small circuit design package
Date: 6 Jan 93 21:22:52
Organization: Dept. of Computer Science, Brown University
Distribution: world
NNTP-Posting-Host: vegas.cs.brown.edu

Sorry if this is the wrong newsgroup for this question, but...

I'm looking for a SMALL unix/X11 package that will allow me to design
simple circuits graphically.  This is to be used in an intro computer
science (not EE) class so detail is unimportant but ease of use is.  I
should be able to use simple OR, AND, NOT, and XOR gates.  Little is
necessary but would be a nice plus.

If you know of any freeware packages out there on the net that do this
(or you've written one yourself and would like a beta tester) please
send me mail!

thanks,


rodrigo vanegas
rv@cs.brown.edu
brown univerdity
Newsgroups: comp.lsi.cad,sci.electronics
From: koch@eis.cs.tu-bs.de (Andreas Koch)
Subject: Destroying Xilinx FPGAs by improper configuration?
Organization: TU Braunschweig,Informatik,EIS,West Germany
Date: Mon, 11 Jan 1993 14:25:53 GMT

Is it possible to physically destroy a Xilinx 3000 series LCA
by programming only (meaning: outside electrical parameters
are within valid bounds)? Since we are in the process of
establishing FPGA design labs, we would like to know if
we have to watch out for critical design flaws which would
endanger our LCAs. Any hints are appreciated!

Andreas Koch
-- 
Andreas Koch                                Email  : koch@eis.cs.tu-bs.de
Institut f"ur theoretische Informatik       Phone  : x49-531-391-2384
Abteilung Entwurf Integrierter Schaltungen  Phax   : x49-531-391-5840
Gaussstr. 11                                Telex  : 95 25 26
From: garnett@cs.man.ac.uk (Paul Garnett PhD)
Newsgroups: comp.lsi.cad
Subject: Neocad & Xilinx - Any users?
Date: 10 Jan 93 19:33:08 GMT


Is there anyone out there using Neocad's FPGA Foundry s/w to design
on Xilinx?

I would be really interested in your comments on the s/w especially
if you have used the Xilinx tools.

Please mail your comments to me, I will summarise if anyone shows any
interest.

---Paul

garnett@cs.man.ac.uk
Newsgroups: comp.lsi.cad,sci.electronics