[1584] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

No subject found in mail header

daemon@ATHENA.MIT.EDU (Tony Merc Mobily)
Tue Mar 5 09:57:57 1996

Date: Tue, 5 Mar 1996 12:13:09 +0100 (MET)
From: Tony Merc Mobily <merc@merc.iternet.it>
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu

'llo,

i'm OK with EKR.
I'm a system administrator, and i manage a domain space (iternet.it).
The problem is NOT in DNS, i think.
DNS works file, really, and touch it is a silly thing.
I wanted know if i'm right for that i think:

I configure named so that merc.iternet.it -> 194.1.1.1.
194.1.1.1 is the host i want to hack.
When i run an applet, it check for my domain, and the result is: 194.1.1.1.
In this way, the applet know that it's localhost, and permit to write on 
local disk (and other funny things...).
Is it right?

What can be the possible solution?
The answer is: there is not!
It's IMPOSSIBLE to check ALL hosts in the world, to know if samebody 
points to something wrong.
I*M*P*O*S*S*I*B*L*E*
So...
What do you want to change in DNS structure, DAN?

I did not understand a thing.
What could effectivly do an applet in the server where it runs?
And when, and how?

-----------------------------------------------------------------------------
http://www.bpoint.com         Tony /\\/\\erc Mobily         System Operator
BreakPoint sas                  merc@bpoint.com             Security Manager
++39 85 75322                                               Network Programmer
------------------------------------------------------------------------------




home help back first fref pref prev next nref lref last post