OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: /dev/{km,m}em worries

Re: /dev/{km,m}em worries

Bruce Barnett (barnettalydar.crd.ge.com)
Tue, 17 May 94 11:30:38 EDT

> 
> What exactly are the problems with having /dev/mem and /dev/kmem readable
> by other? 

Years ago I had a old program that worked on a Vax.  It read the device
drivers and internal structures and allows you to see what any user
typed. You specified the name of the terminal, and voila - instant spy.

You could also learn passwords, etc. using similar techniques.