OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Sep) 1998: Re: FreeBSD VM gremlin

Re: FreeBSD VM gremlin

James McParlane (jamesAPLDIGITAL.COM.AU)
Mon, 21 Sep 1998 11:33:11 +1000 

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/plain;
        charset="iso-8859-1"

Sounds like we all need EIT :)

http://pobox.upenn.edu/~tex/papers/thesis/index.html

-----Original Message-----
From: Charles M. Hannum [mailto:rootIHACK.NET]
Sent: Friday, September 18, 1998 9:49 PM
To: BUGTRAQNETSPACE.ORG
Subject: Re: FreeBSD VM gremlin


> You should have md5 checksums of files that you are concerned about,
> as timestamps are useless in the face of a good attacker.

Rubbish!  A checksum doesn't tell me that someone hadn't temporarily
replaced the file and has now put the original back.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
RE: FreeBSD VM gremlin

Sounds like we all need EIT :)

http://pobox.upenn.edu/~tex/papers/thesis/index.html

-----Original Message-----
From: Charles M. Hannum [IHACK.NET">mailto:rootIHACK.NET]
Sent: Friday, September 18, 1998 9:49 PM
To: BUGTRAQNETSPACE.ORG
Subject: Re: FreeBSD VM gremlin


> You should have md5 checksums of files that you = are concerned about,
> as timestamps are useless in the face of a good = attacker.

Rubbish!  A checksum doesn't tell me that = someone hadn't temporarily
replaced the file and has now put the original = back. 

------_=_NextPart_001_01BDE4FF.CECAE03C--