OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: (PC video card memory aperture !=0) =>OS Rootability?

From: Jason Dixon (jasondixongroup.net)
Date: Mon May 01 2006 - 09:13:37 CDT


On May 1, 2006, at 9:57 AM, Dave Feustel wrote:

> Below is a comment about X-Windows security sent to me
> by a person with a lot of experience in computer security:
> ===========
> Dave,
>
> X-Windows has been known to be insecure for some time. That is to
> say it can be hacked.
>
> Now you could get the code and change the sockets that are used or
> require authentication of every communication. But this would slow
> it down.
> You might also have "virtual" x-windows where you use 127.0.0.x as the
> endpoint and refuse to allow non-local connections.
> ============
> Would implementing virtual x-windows as this person describes above
> solve the X-Windows security problem on OpenBSD?

Why don't you try it and let us all know? Quit waiting on someone
else to test your weekly "exploits".

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net