HDTenEightyP/NetNews huggingface dataset:
From: deb@spectra.eng.hawaii.edu (David Barrett)
Subject: Re: Password at Boot for PCs
Keywords: pc password boot security
Organization: University of Hawaii, Dept. of Electrical Engineering
Distribution: alt
Date: Sun, 22 Nov 1992 02:55:26 GMT

In article <1dmmrgINNo59@charnel.ecst.csuchico.edu> shawnb@ecst.csuchico.edu (S.E. Brown) writes:
>Someone a while back wrote:
>
>>>Does anyone know of commercial or P.D. software that would prevent 
>>>booting a PC unless a password id keyed in? The purpose is to restrict
>>>PC booting for those PC that have no EPROM passwrd nor a key switch.
>>
>>>I know, I know, that would not prevent an intruder to boot the PC 
>>>from a floppy, but hey ... that's better than nothing at all!
>>
>>There is a program called Safe Guard, I think it's commercial, but,
>>I do not know where to get it.
>>It will ask for account and password when booted from the harddrive, 
>>and, if booted from floppy disk it will deny that the hard drive exists.
>
>There is a program available at the simtel archive called ccp10a.zip 
>(I think this is correct, in any case it is in the /msdos/security
>directory) that is put out by McAffee Associates.  It provides boot
>protection for the hard disks, and will not allow access to the hard disks 
>when the system is booted form a floppy.  All in all it appears to be
>a pretty good system, the only drawback being that I can't run any
>disk-caching software, because it somehow messes with the functioning
>of the program.
>
>Shawn
>

There is also a program called Disklock which restructures the harddrive
to another format that cannot be accessed from a floppy.  The program has
primary and secondary password protection prompted upon boot up and cannot
be sabotaged in any way once installed.  One driver in the config.sys file
for the program can be deleted and still will protect the system.  It will
also hide directories and files but then unaccessable to the system unless you
use the primary passcode.  Secondary passcode is for transitory users.  The
only disadvantage is that a malfunction of the harddrive on boot up means
you are up a creek to get in to reformat.  A floppy for each machine keeps
a uninstall program requiring password to use.  It also will work with
windows if you get a recent version.  I have the whereabouts of the company
and the program.  

dB


Newsgroups: alt.security
From: fitzgb@mml0.meche.rpi.edu (Brian Fitzgerald)
Subject: Re: Multiple telnet security
Organization: Rensselaer Polytechnic Institute, Troy, NY
Date: Tue, 24 Nov 1992 05:34:17 GMT

lllowen writes:
>I have been looking around for an answer to this, but have not been able to
>find a definite answer.  Are there any secrity problems with multiple
>telnet sessions (from one machine, and then telnetting to another)?  
>Directly, I am curious about if an admin can set up the first machine to
>record outbound telnet sessions to another machine; thus receive the echo 
>for login names, passwords, and anything else occuring in that session.

In general, the superuser has access to all the data that the machine
has, including the keystrokes, the ethernet packets, the files, and the
data in all the processes.

Brian
From: kyle@wendy-fate.uu.net (Kyle Jones)
Newsgroups: alt.security.index
Newsgroups-Indexed: alt.security
Subject: alt.security index for the week ending 21 November 1992
Date: Sat, 21 Nov 1992 22:00:29 EST
Summary: This is an index of alt.security postings that describe or fix a
         security hole in a computer system.  Each line contains the
         message-ID of an article and a terse summary of the article's
         contents.  See the article itself for details.

<Nov.17.17.00.24.1992.19878@presto.ig.com> "various security vulnerabilities (Sun)"
From: wack@ariel.ncsl.nist.gov (John Wack)
Newsgroups: alt.security
Subject: help: modifying ftpd
Date: 23 Nov 92 15:01:51 GMT
Distribution: na
Organization: National Institute of Standards & Technology


We're using challenge/response s/w and cards for access to our SunOS
system - for all logins.  Basically, after the username/password,
you get a prompt for the challenge.

Now I'd like to add this to our ftp daemon.  The problem I'm running
into is mostly that I can't figure out exactly how to add the
additional prompts to ftpd - what I'd like to do is, if the user is
not anonymous, add a "Challenge: 120ej032" message immediately after
the user/password stuff, followed by a "Response:" prompt with the
smarts to read the response from the terminal.  

I tried a few things but then realized that ftpd uses a lot of messy
routines to parse commands and responses - in the interests of time
and my limited ability, I'm wondering if anyone out there has done
anything similar to a BSD-based ftpd and can give me a few pointers.
It seems as if I need to add a new command/response sequence to ftpd
as opposed to a few printfs and fgets. We're using the ftpd from wustl 
if that helps.

Any pointers appreciated,
John Wack

Newsgroups: alt.security
From: bbs.ruscal@tsoft.sf-bay.org (Russel Mar)
Subject: Re: Detecting an Ethernet Tap
Organization: The TSoft BBS and Public Access Unix, +1 415 969 8238
Date: Wed, 18 Nov 1992 07:35:19 GMT

root@admin.mport.COM (admin) writes:

> howesb@monashee.sfu.ca (Charles Howes) writes:
> 
> >In article <1992Nov14.064550.16279@netcom.com> aclark@netcom.com (Al Clark) 
> >>In article <1dpmb7INNt2f@usenet.INS.CWRU.Edu> wb8foz@skybridge.scl.cwru.edu
> >>>2) protect the etherhose
> >>>	b) run fiber inside inner rigid conduit. Run it inside
> >>>	larger one. Fill space between with neurotoxins under
> >>>	pressure......
> 
> >I bet this could be defeated by first applying rubber cement and tape to
> >the conduit and making the tap with a drill/needle.  It would be funny if a
> >simple hammer and nail could do the job.
> > ...
> ===========================
> 
> Do you even have to be intrusive?  I thought you could get data off a
> computer by its emmisions.  Couldn't you do the same with ethernet cable?
> 
> 
> 
> =*=*=*=*=*=*=*=*=*=*=*=*========*=*=*=*=*=*=*=========*=*=*=*=*=*=*=*=*=*=*=*
> Richard ducman Ducoty                                          Microport Inc.
> duc@mport.com                                                  Scotts Valley,
> root@mport.com                                                 408.438.8649

//////////////////////////////
A good reminder since I noticed this msg has gotten some regular 
comments. Normal commerial computing equipment radiates enough for 
someone to reconstruct screen data with modern equipment.  Pay a private 
investigator enough, and he/she will prove it to you.  The last publicly 
known defense was to use TEMPEST qualified equipment;  There may be more 
advanced methods (TEMPEST was the term for specially shielded equipment) 
now available, since TEMPEST dates back to the IBM PC/XT.  

..So one would assume that using TEMPEST qualified equipment with 
fiber-optics for all external data connections would be fairly secure as 
long as an interconnect (i.e. connector) or fiber is not tapped.
I should add that the technology to non-invasively tap fiber (as appposed 
to fusion splicing) has existed for quite some time.  I believe Raychem
Corporation (or it's subsidary Raynet) in Menlo Park, CA holds a basic 
patent on non-invasive taps.  It was the basis for Raynet's first 
released telecom product, first detailed in 1987.

--
Russel Mar (bbs.ruscal@tsoft.sf-bay.org)
Newsgroups: alt.security
From: lllowen@netcom.com (lllowen)
Subject: Multiple telnet security
Organization: Netcom Online Communications Services (408-241-9760 login: guest)
Date: Tue, 24 Nov 1992 02:28:32 GMT

I have been looking around for an answer to this, but have not been able to
find a definite answer.  Are there any secrity problems with multiple
telnet sessions (from one machine, and then telnetting to another)?  
Directly, I am curious about if an admin can set up the first machine to
record outbound telnet sessions to another machine; thus receive the echo 
for login names, passwords, and anything else occuring in that session.

Thank you.
-- 

Lon Lowen Jr.                        |  Wayne State University
Netcom Online Communications         |  Detroit, Michigan
lllowen@netcom.com                   |  (lllowen@mts.cc.wayne.edu)
-------------------------------------------------------------------------
Newsgroups: alt.security,comp.security.misc,sci.crypt
From: rja14@cl.cam.ac.uk (Ross Anderson)
Subject: Security Reviews
Organization: Cambridge University Computer Lab, UK
Date: Wed, 18 Nov 1992 18:26:27 GMT


The first issue of `Computer and Communications Security Reviews' is due 
to be published next week.

This journal contains about 200 abstracts of recently published research
papers, including most of the papers at Eurocrypt 92 and Crypto 92. In 
addition to cryptology, it covers operating system and database security, 
formal methods, security management, applications and engineering; the 
second issue should cover NCSC, ESORICS, Auscrypt and the Foundations 
Workshop as well as journal papers.

I have a number of complimentary copies to distribute. If you think your 
organisation might be interested in subscribing, please send me an email
with your name and address. First come first served!


Ross Anderson (Editor)

rja14@cl.cam.ac.uk
From: davidsen@yeti.crd.GE.COM (william E Davidsen)
Newsgroups: alt.security
Subject: Re: Password at Boot for PCs
Keywords: pc password boot security
Date: 23 Nov 92 21:37:53 GMT
Reply-To: davidsen@crd.ge.com (bill davidsen)
Distribution: alt
Organization: GE Corporate R&D Center, Schenectady NY

The only reasonable security I've found is:
  1. use AMI BIOS
  2. set to boot from hard disk FIRST, only use floppy if HD is
     non-bootable.
  3. put a password on the configuration.
  4. Use any of the free/share/commercial progs in config.sys
     to ask a password for machine access.

Notes: (1) other BIOS with this capability may exist. (2) If someone has
enough physical access to the machine to take it apart and remove the
CMOS battery they can get it to boot from floppy. Generally the problem
is *undetected* access, or *fast* access, as from a curious fellow
worker or student, rather than a professional industrial spy.

It's a lot easier to limit physical security to keeping the case closed
and on the desktop than it is to prevent all access and still have
machine useful.
-- 
bill davidsen, GE Corp. R&D Center; Box 8; Schenectady NY 12345
    Keyboard controller has been disabled, press F1 to continue.
From: root@admin.mport.COM (admin)
Newsgroups: alt.security
Subject: Re: Detecting an Ethernet Tap
Date: 17 Nov 92 22:37:28 GMT
Organization: Microport Inc., Scotts Valley, CA 95066 US of A

howesb@monashee.sfu.ca (Charles Howes) writes:

>In article <1992Nov14.064550.16279@netcom.com> aclark@netcom.com (Al Clark) writes:
>>In article <1dpmb7INNt2f@usenet.INS.CWRU.Edu> wb8foz@skybridge.scl.cwru.edu (David Lesher) writes:
>>>2) protect the etherhose
>>>	b) run fiber inside inner rigid conduit. Run it inside
>>>	larger one. Fill space between with neurotoxins under
>>>	pressure......

>I bet this could be defeated by first applying rubber cement and tape to
>the conduit and making the tap with a drill/needle.  It would be funny if a
>simple hammer and nail could do the job.
> ...
===========================

Do you even have to be intrusive?  I thought you could get data off a
computer by its emmisions.  Couldn't you do the same with ethernet cable?



=*=*=*=*=*=*=*=*=*=*=*=*========*=*=*=*=*=*=*=========*=*=*=*=*=*=*=*=*=*=*=*=*=
Richard ducman Ducoty                                          Microport Inc.
duc@mport.com                                                  Scotts Valley, CA
root@mport.com                                                 408.438.8649
Newsgroups: alt.security
From: aclark@netcom.com (Al Clark)
Subject: Re: Detecting an Ethernet Tap
Organization: Netcom - Online Communication Services  (408 241-9760 guest) 
Date: Mon, 16 Nov 1992 00:13:26 GMT

In article <1992Nov14.223553.15054@sfu.ca> howesb@monashee.sfu.ca (Charles Howes) writes:
>In article <1992Nov14.064550.16279@netcom.com> aclark@netcom.com (Al Clark) writes:
>>In article <1dpmb7INNt2f@usenet.INS.CWRU.Edu> wb8foz@skybridge.scl.cwru.edu (David Lesher) writes:
>>>2) protect the etherhose
>>>	b) run fiber inside inner rigid conduit. Run it inside
>>>	larger one. Fill space between with neurotoxins under
>>>	pressure......
>>>
>>     Actually, what you do is simply pressurize the conduit with dry
>>     nitrogen, and add a pressure switch alarm which goes off if the
>>     pressure drops.
>
>I bet this could be defeated by first applying rubber cement and tape to
>the conduit and making the tap with a drill/needle.  It would be funny if a
>simple hammer and nail could do the job.
>
        [alternates deleted ]

	You may have missed a small point; David Lesher proposed a
	fiber optic thread inside a conduit.  You have to make a splice
	in the fiber optics inside the pressurized conduit.  If you
	have an inner conduit with a different pressure, and alarm on
	changes in the differential, you are even more secure.


-- 
Al - aclark@netcom.com - My opinions are my own.
Newsgroups: alt.security
From: bbs.ruscal@tsoft.sf-bay.org (Russel Mar)
Subject: Re: Detecting an Ethernet Tap
Organization: The TSoft BBS and Public Access Unix, +1 415 969 8238
Date: Mon, 23 Nov 1992 07:57:36 GMT

ujacampbe@memstvx1.memst.edu (James Campbell) writes:

> In article <k0BFuB1w165w@tsoft.sf-bay.org>, bbs.ruscal@tsoft.sf-bay.org 
>     (Russel Mar) writes:
> 
> > I should add that the technology to non-invasively tap fiber (as appposed 
> > to fusion splicing) has existed for quite some time.  I believe Raychem
> > Corporation (or it's subsidary Raynet) in Menlo Park, CA holds a basic 
> > patent on non-invasive taps.  It was the basis for Raynet's first 
> > released telecom product, first detailed in 1987.
> > 
> > --
> > Russel Mar (bbs.ruscal@tsoft.sf-bay.org)
> 
>     I guess I was out of the loop on that one.  What's the principle behind
> Raynet's tapping technology?
> 
> 
> 
>   ========================================================================;-)
>   James Campbell, Math Sciences Department, MSU; ujacampbe@memstvx1.memst.edu
>   ---------------------------------------------------------------------------
>   The above text has not been reviewed by DIRNSA, and should not be construed
>   as an official release of the National Security Agency or any of its member
>   organizations. No non-public information shall be included in this message.
>   ===========================================================================

The basis for that Raychem/Raynet tap was to steal light from a bend in 
the fiber.  As the tap didn't require a splice, it turned a fiber into a
true bus, since you could insert a tap anywhere in the fiber.  The first 
deployment of the tap was for phone service in the U.S., while a test 
site in West Germany included both phone and video.  Phone data and video 
were on separate fibers.

It's been a few years since, so i no longer recall what is proprietary.  
Probably the patent has all the skinny on the principle.  Alternately, 
contact Raynet Public Relations regaring the LOC-1 system at 415/324-6400 
in menlo park, CA.

-Russel

--
Russel Mar (bbs.ruscal@tsoft.sf-bay.org)
Newsgroups: alt.security
From: adamfox@b115.super.org (Adam Fox)
Subject: Re: Redirecting SU's output
Organization: Supercomputing Research Center, Bowie, MD  USA
Date: Mon, 16 Nov 1992 22:09:26 GMT

In article <1ducbgINN65k@usenet.INS.CWRU.Edu>, ck041@cleveland.Freenet.Edu (Kevin Currie) writes:
|> 
|> 
|> 	Is is possible to redirect SU's screen output to a text file?
|> I tried SU > textfile    but that just gives me an empty file.
|> 	Any ideas?

What type of system are you running?   The following works under SunOS 4.1.1
(under csh/tcsh)

su > foo -> does not send the password prompt to the file (that is done in
stderr).

su >& foo -> also sends the password prompt to the file foo as well as the output
of the ensuing shell.

Again, your system/shells may vary.

-- Adam Fox
adamfox@super.org
Newsgroups: alt.security,comp.security.misc
From: vince@ghost.dsi.unimi.it (David Vincenzetti)
Subject: Re: HP-UX DUI should setuid or not
Organization: Computer Science Dep. - Milan University
Date: Mon, 16 Nov 1992 14:59:39 GMT

In <1992Nov14.074521.17444@ccds3.ntu.edu.tw> ywtsay@aquarius.ce.ntu.edu.tw (Yi-Hwai Tsai) writes:

>Hi.. 
>	There may have '/usr/diag/bin/DUI' in many HP-UX 8.0 machines. It is setuid by root. I don't think it should be run by everyone in host. because it can be used to empty any file in system. Am I right ?

I do not know DUI but *beware*: the /usr/diag directory do contains
**SUID'ed SCRIPTS** and this is a terrible security hole: due a bug
in the kernel everyone can become root in a matter of seconds. Please
`chmod u-s` the SUID'ed scripts you get: there should be not SUID'ed
script to root in your whole file system.

Regards,
David
-- 
David Vincenzetti := {system, security} administrator
Dept of CS, via Comelico 41,   Email : vince@ghost.dsi.unimi.it
I-20133 Milan, ITALY           Voice : ++39 2 55006 39{1,2}
*PGP & RPEM accepted*            Fax : ++39 2 55006 373
From: holland@matt.ksu.ksu.edu (Rich Holland)
Newsgroups: alt.security
Subject: Re: Detecting an Ethernet Tap
Date: 18 Nov 1992 18:38:47 -0600
Organization: Kansas State University
NNTP-Posting-Host: matt.ksu.ksu.edu

ujacampbe@memstvx1.memst.edu (James Campbell) writes:

> [bbs.ruscal@tsoft.sf-bay.org] 
>> I should add that the technology to non-invasively tap fiber (as appposed 
>> to fusion splicing) has existed for quite some time.  I believe Raychem
>> Corporation (or it's subsidary Raynet) in Menlo Park, CA holds a basic 
>> patent on non-invasive taps.  It was the basis for Raynet's first 
>> released telecom product, first detailed in 1987.

> I guess I was out of the loop on that one.  What's the principle behind
> Raynet's tapping technology?

Yes, or even some references to their first telecom product, etc.  Where
can I go for more information?  :-)

-- 
Rich Holland              | INTERNET: holland@matt.ksu.ksu.edu
100 Jardine Terr, Apt A7  | BITNET  : holland@ksuvm
Manhattan, KS  66502-3357 | UUCP    : ...!rutgers!matt.ksu.ksu.edu!holland
char*p="char*p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
From: silverm@bcstec.ca.boeing.com (Jeff Silverman)
Newsgroups: alt.security
Subject: Re: Detecting an Ethernet Tap
Date: 19 Nov 92 05:27:17 GMT
Organization: Boeing Computer Services, Seattle

ujacampbe@memstvx1.memst.edu (James Campbell) writes:

>    I guess I was out of the loop on that one.  What's the principle behind
>Raynet's tapping technology?



>  James Campbell, Math Sciences Department, MSU; ujacampbe@memstvx1.memst.edu

The story I was told is that it involves carefully scraping a bit of the jacket
off of the fiber and then fixing a photodetector at the spot.  With a little
practice, you can do it without breaking the fiber.  ALthough I haven't heard
of anybody doing this, couldn't it be done by applying a small drop of some
acid (not  Hydrofluric?)?  I think the jackets of the fiber optic and the 
inner fiber is silicon Dioxide.

As far as reading a screen from a distance - it is relatively easy to do if
you have a parabolic antenna.

You can't trust humans, you can't trust computers, you can't trust the
government - I guess I'll go have a pizza.


Jeff Silverman, Boeing COMMERCIAL airplane

Newsgroups: alt.horror
From: tapio@nic.funet.fi (Tapio Keih{nen)
Subject: King movie top-5 reminder
Organization: Finnish University and ResearcH Network, FUNET
Date: Sun, 22 Nov 92 11:23:53 GMT

This is a reminder of Stephen King top-5 videos. If you haven't yet
took part of it, read the following:

(this far I've gotten only 18 replies...)

*>I'm interested how people rank movies based on Stephen King stories.
*>So, I decided to do this:
*>
*>Please e-mail me the top-5 of King movies you've seen. First gets 5
*>points, 2nd 4 and so on. Please don't list more than 5 and _DO__NOT_
*>post your lists to alt.horror but __E-MAIL__ them to me
*>(tapio@nic.funet.fi). I'll post the results on week 48 or if I'm still
*>receiving replies then, I'll post them sometime later.
*>
*>Here is a list of King movies -there might be a couple of more
*>around but I either don't know them or I didn't remember to put
*>them here:
*>
*>(in no particular order)
*>Carrie
*>Christine
*>Stand By Me
*>Sleepwalkers
*>Maximum Overdrive
*>Creepshow
*>Creepshow 2
*>Children Of The Corn
*>Cat's Eye
*>Lawnmover Man
*>Pet Sematary
*>It
*>The Shining
*>Firestarter
*>Sometimes They Come Back
*>Graveyard Shift
*>The Running Man
*>Silver Bullet
*>Cujo
*>The Dead Zone
*>Misery
*>Salem's Lot

--
Tapio Keihanen - tapio@nic.funet.fi \ / "Never look back, never turn!"
                - k135528@cc.tut.fi / \        -Ronnie James Dio, 1981
Newsgroups: alt.horror
Subject: Re: WHO OWNS CTHULHU?????
From: HISC9016351D@LUST.LATROBE.EDU.AU (MAMMONE,Robert)
Date: Mon, 16 Nov 1992 13:07:38 GMT
Organization: La Trobe University
X-News-Reader: VMS NEWS 1.24


> 
> My recollection is that the Great Old Ones and the Elder Gods were two sides
> in a battle that the Great Old Ones lost.  IMHO, reminiscent of Satan's fall.
> The Great Old Ones were banished to Earth and lost much of their powers.
> Now, from the human point of view, the GOOs are evil.  That *may* make their
> opponents good.  However, human prisoners have made pets of the rats and 
> cockroaches in the dungeons.  The jailers are more likely to set out poison
> or fumigate the place.  So, anyone calling on the Elder Gods does so at his
> own risk, IMHO.  Because I somehow can't see the Elder Gods being so all
> fired fond of humanity while leaving them in their defeated enemies' jail.
> 
>Actually, your recollection is wrong.  the construction of the relationship
b/w the Great old Ones and the Elder Gods that you have put forward is
Derleth's, Not Lovecrafts.  See the intro to the Cthulhu RPG for an 
explanation at length 
Newsgroups: alt.horror
From: jsmt@troi.cc.rochester.edu (Julia Smith)
Subject: Re: D Koontz
Organization: University of Rochester (Rochester, NY)
Distribution: na
Date: Thu, 19 Nov 92 08:41:51 GMT

Sigh... I used to like Koontz, I really did.  But never again -
listening to it on tape killed it.  DK mixes about 2 minutes
of true plot development with 10 minutes of expounding about...
the meaning of life, the point of death, the man's-best-friendness
of dogs, the.... Give It A REST!!   I never understood how much
I skim when I read.  But the man is preachy as hell, and can't/won't
let up for an instant.  Never never listen to him on tape if you are
a fan - maintain your illusions...


Newsgroups: alt.horror,rec.arts.books