December 2003 - cypherpunks-legacy

RE: WINDOWS NT ????
by John Fricker 17 Dec '03

17 Dec '03

An NT machine running off the shelf protocols and services is certainly more secure than your average linux install. Of course clueless administrators for either (any) platform can leave the door wide open easily enough. But what do you mean by secure? >snow (snow(a)smoke.suba.com) said something about Re: WINDOWS NT ???? on or about 10/4/96 2:57 PM > >> pclow wrote: >> > Adamsc wrote: >> > > > is Windows NT secured system ? >> > NT? Secured? hahahahahahahahahahahahahahahahhahahahahahahaha >> 8-) >> How ? > > By turning off the machine, unpluging the ethernet, moving the >hard drive to another state... > > >Petro, Christopher C. >petro(a)suba.com <prefered for any non-list stuff> >snow(a)smoke.suba.com >End of message

2 1

Re: The New GAK-Clipper Thing will Fail
by jim bell 17 Dec '03

17 Dec '03

At 05:41 AM 10/4/96 -0700, Bill Stewart wrote: >At 03:07 PM 10/3/96 -0800, jim bell <jimbell(a)pacifier.com> wrote: >>The point, of course, is NOT to encourage these companies to support Clipper >>IV. Rather, goal is to suggest to them a "poison pill" which would make >>their cooperation meaningless in the end, while at the same time giving them >>a 2-year free 56-bit export. Think of it as a monkey-wrench they can throw >>into the works. > >A really _fine_ post! I'm also impressed by the way they announced it >just _after_ Congress ended its session, while they're busy losing the export >level in court. There's an uncomfortable "tactics" problem, associated with my previous suggestions. To say something like, "we think you ought to change that GAK proposal by [fill in the blank]", at least IMPLIES that it will somehow be "acceptable" should that change be made. Well, to me, no GAK will ever be acceptable. Even so, I think it would still be tactically useful to help sabotaging GAK by "improving it to death." I start by assuming that most of the companies who signed onto the Axis ("alliance") would really have preferred to NOT see GAK, everything else being the same. They want the goodies; they don't want the shit. I think they should be approached by pointing this out, and suggesting that if they want to limit the negative publicity they'll surely get from this plan, while at the same time collecting the goodies the government is offering, they can conveniently and publicly "interpret" their rights broadly, announce that they'll structure their systems in the least government-friendly way possible. All this should be possible, because of the fact that this proposal isn't really even settled. In fact, it doesn't even ask the participants to show their plan immediately, merely after two years or so. Insisting that the government pay for all legal challenges is a good start, and refusing to do any GAK transfer without a court challenge. Another thing they could do is to insist that 56-bits of key always remain non-GAK. (perhaps increasing at the rate of two bits every three years.) This would make GAK essentially useless for that drift-net fishing that's often talked about, because even a sudden policy change forcing "key-escrow" people to give up all their keys will still make decrypting a message a pain. It would also make it easier to use super-encryption, because finding that needle in that 2**56 haystack would make it impossible to prove which particular decrypt contained a further-encrypted message: Even if super-encryption were outlawed, it would become essentially impossible to prove that none of the other (2**56)-1 messages were not some valid, non-super-encrypted message. Jim Bell jimbell(a)pacifier.com

1 0

RE: WINDOWS NT ????
by John Fricker 17 Dec '03

17 Dec '03

>Bill Stewart (stewarts(a)ix.netcom.com) said something about Re: WINDOWS NT ???? on or about 10/4/96 7:44 AM >At 07:47 PM 10/3/96 +1030, you wrote: >>hi, >> is Windows NT secured system ? > >Windows 4.x moves the graphics/windowing system into Ring 0, >where the "secure" parts of the kernel are. Bad. >This means graphics bugs can make the kernel insecure or crash. >I don't trust it, especially because Windows 3.1 crashes all the time >for me, and stupid bugs make Windows 3.1 behave badly for me. >So if they put the window system in the kernel, I don't trust it. >End of message Graphics bugs will not crash the system since graphics bugs still run in protected mode. (ie bugs in applications that screw up GDI). Buggy video drivers though can bring the system down. But this does not affect security, only stability. Security in NT can be defeated by any clever, out of work, bored, NT device driver author who brews up a stealth device driver replacement (perhaps a COM port improvement) that could run amok on the file system or basically do anything. Of course, any clever device driver developer is making enough money to not be bored nor even consider writing a backdoor into a driver. Right? --j

1 0

Tietmeyer-Only banks should issue electronic money
by Joseph M. Reagle Jr. 17 Dec '03

17 Dec '03

I'm sure they'd like to have it "applied to Internet network money.".... > FRANKFURT, Oct 3 (Reuter) - Bundesbank President Hans >Tietmeyer said on Thursday a new government policy to give only >banks the right to issue pre-paid cards, or ``electronic purses'', >should also be applied to Internet network money. > Tietmeyer said in the text of a speech to The Economic Club >of New York that G-10 central bank governors were addressing the >new payment forms because they may cause difficulties for >central banks to ensure the integrity of payments. > Tietmeyer noted European Union central bankers have agreed >that only banks should issue the pre-paid cards. The policy is >expected to be widened to include the rights to create and >maintain Internet-based electronic cash systems. > ``In our opinion, the same should definitely also apply to >network money,'' he said. > Tietmeyer said electronic forms of money tend to crowd out >currency and deposit money, which may increase the potential for >credit institutions to create money. > ``Electronic money may impair the supervisory functions of >the central bank, or, in other words, its function of ensuring >the integrity of payments,'' Tietmeyer said in a text of the >speech released in Frankfurt under embargo. > ``That would increase the risk of crises in one country >spreading out to engulf payment systems worldwide,'' he said. > Electronic purses are plastic cards with a built-in >micro-chip which stores the electronic cash value of an account >and can be reloaded at special machines. > The proposal to restrict such projects to banks is part of a >new German banking law which is still under preparation but >expected to be enforced in 1997. > Tietmeyer said it was difficult to create definitive >regulations for electronic money at ``this early stage''. > ``The evolution of electronic money is only in its infancy. >But it is a characteristic feature of today's world that >tomorrow's world will be upon us in no time,'' he said. > Electronic purses, also known as smart cards, are not yet >available in cash-dominated Germany but tests are being run on >several projects. > Internet banking is slowly gaining credence in Germany after >some of the top banks, including Dresdner Bank AG, launched >securities trading accounts via the Internet. _______________________ Regards, He who foresees calamities suffers them twice over. -? Joseph Reagle http://rpcp.mit.edu/~reagle/home.html reagle(a)mit.edu E0 D5 B2 05 B6 12 DA 65 BE 4D E3 C1 6A 66 25 4E

1 0

[SPAM] More "fuckhead" e-mail from Timmy May and his young friends
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Timmy May has no life. >From: Troy Varange <varange(a)crl.com> >Message-Id: <199610050215.AA00807(a)crl5.crl.com> >Subject: Re: [VULIS] >To: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >Date: Fri, 4 Oct 1996 19:15:36 -0700 (PDT) >In-Reply-To: <FV67uD8w165w(a)bwalk.dm.com> from "Dr.Dimitri Vulis KOTM" at Oct 2, 96 08:29:14 pm >X-Mailer: ELM [version 2.4 PL23] >Mime-Version: 1.0 >Content-Type: text/plain; charset=US-ASCII >Content-Transfer-Encoding: 7bit >Content-Length: 7527 > >> >> I have no dog, nor any other pets. Timmy May (fart) reportedly has two cats. >> If you suspect that Timmy May (fart) sexually abuses his cats, or any other >> animals, you should promptly contact the ASPCA and also alert rec.pets.cats. >> >> (Frankly, I doubt that the old fart can get his dick up to sexually abuse >> anything, including his cats. Senility puts an end to sexual molestation.) >> >> >From: Troy Varange <varange(a)crl.com> >> >Message-Id: <199610021931.AA24883(a)crl11.crl.com> >> >Subject: Important >> >To: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >> >Date: Wed, 2 Oct 1996 12:31:21 -0700 (PDT) >> >In-Reply-To: <gqH3uD93w165w(a)bwalk.dm.com> from "Dr.Dimitri Vulis KOTM" at Sep 30, 96 07:57:27 am >> >X-Mailer: ELM [version 2.4 PL23] >> >Mime-Version: 1.0 >> >Content-Type: text/plain; charset=US-ASCII >> >Content-Transfer-Encoding: 7bit >> >Content-Length: 6226 >> > >> >Dr. Vulis sucks his dog's butt. >> > >> >> Timmy May has no life. >> >> >> >> >From: Troy Varange <varange(a)crl.com> >> >> >Message-Id: <199609300441.AA10704(a)crl12.crl.com> >> >> >Subject: Re: Vulis FUCKHEAD sucks Timmy's Cock >> >> >To: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >> >> >Date: Sun, 29 Sep 1996 21:41:42 -0700 (PDT) >> >> >In-Reply-To: <LJV2uD91w165w(a)bwalk.dm.com> from "Dr.Dimitri Vulis KOTM" at Sep 29, 96 11:58:09 pm >> >> >X-Mailer: ELM [version 2.4 PL23] >> >> >Mime-Version: 1.0 >> >> >Content-Type: text/plain; charset=US-ASCII >> >> >Content-Transfer-Encoding: 7bit >> >> >Content-Length: 5298 >> >> > >> >> >Vulis sucks Timmy's boyfriend's cock. >> >> >> >> >> >> Timmy May has no life. >> >> >> >> >> >> >From: Troy Varange <varange(a)crl.com> >> >> >> >Message-Id: <199609300332.AA09870(a)crl12.crl.com> >> >> >> >Subject: Re: [SPAM] More "fuckhead" fan mail from Timmy "peteur" May >> >> >> >To: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >> >> >> >Date: Sun, 29 Sep 1996 20:32:58 -0700 (PDT) >> >> >> >In-Reply-To: <ueP2uD86w165w(a)bwalk.dm.com> from "Dr.Dimitri Vulis KOTM" at Sep 29, 96 09:45:41 pm >> >> >> >X-Mailer: ELM [version 2.4 PL23] >> >> >> >Mime-Version: 1.0 >> >> >> >Content-Type: text/plain; charset=US-ASCII >> >> >> >Content-Transfer-Encoding: 7bit >> >> >> >Content-Length: 4378 >> >> >> > >> >> >> >> berserk >> >> >> >> Timmy May has gone . Has he been eating speed? >> >> >> >> bananas >> >> >> >> >> >> >> >> >From: Troy Varange <varange(a)crl.com> >> >> >> >> >Message-Id: <199609300138.AA08482(a)crl12.crl.com> >> >> >> >> >Subject: Re: [SPAM] More fan mail from Timmy "peteur" May >> >> >> >> >To: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) >> >> >> >> >Date: Sun, 29 Sep 1996 18:38:05 -0700 (PDT) >> >> >> >> >In-Reply-To: <FFi2uD82w165w(a)bwalk.dm.com> from "Dr.Dimitri Vulis KOTM" at Sep 29, 96 07:14:50 pm >> >> >> >> >X-Mailer: ELM [version 2.4 PL23] >> >> >> >> >Mime-Version: 1.0 >> >> >> >> >Content-Type: text/plain; charset=US-ASCII >> >> >> >> >Content-Transfer-Encoding: 7bit >> >> >> >> >Content-Length: 3442 >> >> >> >> > >> >> >> >> >> >> >> >> >> >> What has Timmy been smoking? >> >> >> >> >> >> >> >> >> >> ]From paul(a)fatmans.demon.co.uk Sun Sep 29 19:03:40 1996 >> >> >> >> >> ]Received: by bwalk.dm.com (1.65/waf) >> >> >> >> >> ] via UUCP; Sun, 29 Sep 96 19:14:06 EDT >> >> >> >> >> ] for dlv >> >> >> >> >> ]Received: from disperse.demon.co.uk by uu.psi.com (5.65b/4.0.061193-PSI/PSINet) via SMTP; >> >> >> >> >> ] id AA25790 for dlv(a)bwalk.dm.com; Sun, 29 Sep 96 19:03:40 -0400 >> >> >> >> >> ]Received: from post.demon.co.uk ([(null)]) by relay-2.mail.demon.net id ac16129; >> >> >> >> >> ] 29 Sep 96 15:59 BST >> >> >> >> >> ]Received: from fatmans.demon.co.uk ([158.152.120.223]) by relay-3.mail.demon.net >> >> >> >> >> ] id aa09441; 29 Sep 96 15:54 BST >> >> >> >> >> ]Received: from fatmans.demon.co.uk by fatmans.demon.co.uk with SMTP >> >> >> >> >> ] id AA843903697 ; Sat, 28 Sep 96 09:41:37 +0000 >> >> >> >> >> ]Comments: Authenticated sender is <paul(a)fatmans.demon.co.uk> >> >> >> >> >> ]From: paul(a)fatmans.demon.co.uk >> >> >> >> >> ]To: "Dr.Dimitri Vulis KOTM" <dlv(a)bwalk.dm.com> >> >> >> >> >> ]Date: Sat, 28 Sep 1996 09:21:37 +0000 >> >> >> >> >> ]Mime-Version: 1.0 >> >> >> >> >> ]Content-Type: text/plain; charset=US-ASCII >> >> >> >> >> ]Content-Transfer-Encoding: 7BIT >> >> >> >> >> ]Subject: Re: Possible subs attack???? >> >> >> >> >> ]Priority: normal >> >> >> >> >> ]X-Pm-Encryptor: JN-PGP-P, 4 >> >> >> >> >> ]X-Mailer: Pegasus Mail for Windows (v2.31) >> >> >> >> >> ]Message-Id: <844008901.9441.0(a)fatmans.demon.co.uk> >> >> >> >> >> ] >> >> >> >> >> ]-----BEGIN PGP SIGNED MESSAGE----- >> >> >> >> >> ] >> >> >> >> >> ] >> >> >> >> >> ]> The lying sack of shit Timmy May <paul(a)fatmans.demon.co.uk> writes: >> >> >> >> >> ] >> >> >> >> >> ]> The lying sack of shit Timmy May lies again, as usual. >> >> >> >> >> ] >> >> >> >> >> ]Fuck you, >> >> >> >> >> ] >> >> >> >> >> ]I am not Tim May, Check out the return path if you don`t believe me, >> >> >> >> >> ]if you still don`t here`s my PGP public key signed by the EFF, they >> >> >> >> >> ]don`t sign keys here and there without checking ID`s... >> >> >> >> >> ] >> >> >> >> >> ]Type Bits/KeyID Date User ID >> >> >> >> >> ]pub 1024/5BBFAEB1 1996/07/30 Paul Bradley <paul(a)fatmans.demon.co.uk> >> >> >> >> >> ] >> >> >> >> >> ]- -----BEGIN PGP PUBLIC KEY BLOCK----- >> >> >> >> >> ]Version: 2.6.3ia >> >> >> >> >> ] >> >> >> >> >> ]mQCNAjH9j+cAAAEEAMBvREiQR0ot9dFCO0TiSCSunAYLv2g1Bc6I3bz8FzKXNH53 >> >> >> >> >> ]6mieJf/W4rD+CxJpT0q9RQaaoRtkHJLwbjfK2il3D7mEahMAyqvF/xRJNqkXfhM3 >> >> >> >> >> ]sRJM0Jh43l+W0M5vwokbEbk25/bxWWGspTsLD3YHbzKnG6pOcL5OPIRbv66xAAUR >> >> >> >> >> ]tCdQYXVsIEJyYWRsZXkgPHBhdWxAZmF0bWFucy5kZW1vbi5jby51az6JAJUDBRAy >> >> >> >> >> ]NwfvNkCBjDT0xHEBATQPA/9TORmN/UjNecj03q4anpvdyCLiez5sKuNbnYK50RiP >> >> >> >> >> ]Jj4QpWWvST3smyQ0A86DrZY/re056MXwQmARESx0rFZxdnD0oORICl5r8dJLIy3b >> >> >> >> >> ]j8rbA5olXwZwKz73/X5s13v/pvHYX4cIsbVK8NHXqh5llSKt6TBAuGgkIGF29z5k >> >> >> >> >> ]C4kAlQMFEDI3B9mdtf/umVkv7QEBcRYD/1FBteLqsUmr81euxqqnnrpLlyHb58B/ >> >> >> >> >> ]9sdATuua4uSjX46hXDZ264YozspNrzSB4NEdrmXOWVX3fiE0ga6XkSSkIeF23V90 >> >> >> >> >> ]En37Z0BdbFzgF00FRYTFyTq8eezQrdg/+rBPUsZUmG5wpq3e12FKHQsX01i+1mB2 >> >> >> >> >> ]YmqqwCV5e95eiQCVAgUQMh8uSb5OPIRbv66xAQEqJwP/fxQyiCasjFcbDpsFfsYp >> >> >> >> >> ]put5cCC/9pOx6X3DlbKShPMpUOS+A9HsTEmJQN8Iawv1nSwPdtc2cR/GhW6ilVjW >> >> >> >> >> ]LSloGdMVLabm9pGpZZMkRaZlXFUkOv7VhfgsUiL+vIDryBCAwUZCzQiWycjt/cPi >> >> >> >> >> ]mUqFH41Z7NkyO8ZFdi5GGX0= >> >> >> >> >> ]=CMZA >> >> >> >> >> ]- -----END PGP PUBLIC KEY BLOCK----- >> >> >> >> >> ] >> >> >> >> >> ] >> >> >> >> >> ] >> >> >> >> >> ]-----BEGIN PGP SIGNATURE----- >> >> >> >> >> ]Version: 2.6.3ia >> >> >> >> >> ]Charset: cp850 >> >> >> >> >> ] >> >> >> >> >> ]iQCVAwUBMkzuH75OPIRbv66xAQHSmQQAqw0F/lIsCcQwOpiSQDx4hMqOVVUVXbyR >> >> >> >> >> ]3RMWY20ECE0TpAtJ6hkAiqphsWUSBqiFj2kGHMh+jHSHXIMPF+m1qtwVbgutJC7B >> >> >> >> >> ]8VYWj0VP+bGu5dEUisLrVHDNj5ucEIDyK2GnqObiCiKARFUbOuZnMQOp9TDJqibh >> >> >> >> >> ]2Wqa5+h8R7g= >> >> >> >> >> ]=/M2U >> >> >> >> >> ]-----END PGP SIGNATURE----- >> >> >> >> >> ] >> >> >> >> >> ] Datacomms Technologies web authoring and data security >> >> >> >> >> ] Paul Bradley, Paul(a)fatmans.demon.co.uk >> >> >> >> >> ] Paul(a)crypto.uk.eu.org, Paul(a)cryptography.uk.eu.org >> >> >> >> >> ] Http://www.cryptography.home.ml.org/ >> >> >> >> >> ] Email for PGP public key, ID: 5BBFAEB1 >> >> >> >> >> ] "Don`t forget to mount a scratch monkey" >> >> >> >> >> >> >> >> >> >Fuckhead. >> >> >> >> >> >> >> >Fuckhead. We know your behind Vulis, Cock-sucker >> >> >> >> >> >and he swallows >> >> >> > >> >Fuckhead.

1 0

anagrams
by Julian Assange 17 Dec '03

17 Dec '03

Fast(est?) anagram generator: ftp://suburbia.net/pub/proff/original/gan/an-0.93.tar.gz (unix source and dos executable) Some Anagrams Found Using an-0.92 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Free Software Foundation - I'd fan out tons of freeware! National Security Agency - Lusty yearning at cocaine. President Dole - Led despite Ron. Central Intelligence Agency - Langley: Inelegant, eccentric. -- "Of all tyrannies a tyranny sincerely exercised for the good of its victims may be the most oppressive. It may be better to live under robber barons than under omnipotent moral busybodies, The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated; but those who torment us for own good will torment us without end, for they do so with the approval of their own conscience." - C.S. Lewis, _God in the Dock_ +---------------------+--------------------+----------------------------------+ |Julian Assange RSO | PO Box 2031 BARKER | Secret Analytic Guy Union | |proff(a)suburbia.net | VIC 3122 AUSTRALIA | finger for PGP key hash ID = | |proff(a)gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 | +---------------------+--------------------+----------------------------------+

1 0

Re: gack vs. key escrow vs. key recovery
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Thu, 03 Oct 1996 23:44:59 -0700, Dale Thorn wrote: >Sounds to me like there's a need for a program that can produce secure >encryption, yet the output looks like "real junk", i.e., not anything >like what one of the *better* programs would produce. Then you can >claim (with testimony of experts if necessary) that "I didn't encrypt >it, must be just garbage". And even if you got some bozo govt. person >testifying against you, you shouldn't have much problem making them look >stupid and vindictive in front of a jury. OTP anyone? # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0

Re: WINDOWS NT ????
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Fri, 04 Oct 1996 22:03:17 +1030, Petr Snajdr wrote: >> > > > > is Windows NT secured system ? >> > > NT? Secured? hahahahahahahahahahahahahahahahhahahahahahahaha >> > How ? >> By turning off the machine, unpluging the ethernet, moving the >> hard drive to another state... > 8-) ..and Os/2,unix .etc.etc. not ? OS/2 doesn't claim to be a secure multiuser operating system. If they have console access, they *can* get almost anything*. Unix can be secure, but most places don't run it in the most secure form. However, your average Unix box is probably going to do pretty well, especially if you've compiled Linux with an encrypting file system. Microsoft claims C2 or higher for NT and deserves any ragging they get if it's not. Ditto for any other vendor who claims one thing and sells another. BTW: Bizarre NT Quirk #15413 - The Administrator account does not have access to the entire disk. You got it - if you're the administrator you still cannot look into certain directories belonging to another user - even if you've given all access privileges to the Admin account. Got a few chuckles at work. * - The various OS/2 Servers have a new version of the High Performance File System. HPFS386 does a much better job of maintaining security. Apparently even the boot-floppy that can defeat NTFS won't work. I haven't verified this yet because I'm still waiting for my personal copy of Warp Server Advanced-SMP to arrive. # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

2 1

RE: WINDOWS NT ????
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Fri, 04 Oct 1996 17:29:40 -0700, John Fricker wrote: >An NT machine running off the shelf protocols and services is certainly more secure than >your average linux install. Of course clueless administrators for either (any) platform can >leave the door wide open easily enough. If you define off-the-shelf as what comes on the CD-ROM, true. We certainly couldn't find drivers for half the protocals we use... Otherwise, I'd be tempted to point out the hazards in trusting one piece of code more than another. Particularly since that linux box would come with source code, whereas most NT services don't... Also, it came as a great shock to me that there was an "average" linux install. Is there an average Linux anything? <g> # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0

RE: WINDOWS NT ????
by Adamsc＠io-online.com 17 Dec '03

17 Dec '03

On Fri, 04 Oct 1996 17:43:52 -0700, John Fricker wrote: >>> is Windows NT secured system ? >>Windows 4.x moves the graphics/windowing system into Ring 0, >>where the "secure" parts of the kernel are. Bad. >>This means graphics bugs can make the kernel insecure or crash. >>I don't trust it, especially because Windows 3.1 crashes all the time >>for me, and stupid bugs make Windows 3.1 behave badly for me. >>So if they put the window system in the kernel, I don't trust it. >>End of message >Buggy video drivers though can bring the system down. This is 99% of the problems with any modern operating system: drivers written by Juanito's House of Taiwanese Software. >But this does not affect security, only stability. >Security in NT can be defeated by any clever, out of work, bored, NT device driver author >who brews up a stealth device driver replacement (perhaps a COM port improvement) that >could run amok on the file system or basically do anything. Of course, any clever device >driver developer is making enough money to not be bored nor even consider writing a >backdoor into a driver. Right? Doctor Dobb's had an article (with source) that demonstrated a driver that gave full access to *EVERY* application running on an NT box. They also showed how it could be limited to a single application. I believe the source is on their web site... # Chris Adams <adamsc(a)io-online.com> | http://www.io-online.com/adamsc/adamsc.htp # <cadams(a)acucobol.com> | send mail with subject "send PGPKEY" "That's our advantage at Microsoft; we set the standards and we can change them." --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)

1 0