[2025] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Hacking a Personal Computer via E-mail

daemon@ATHENA.MIT.EDU (Chris Garrigues)
Thu May 9 14:12:59 1996

To: Rolf Weber <weber@iez.com>
Cc: cwg@DeepEddy.Com (Chris Garrigues),
        www-security@ns2.rutgers.edu (www-security), cwg@deepeddy.DeepEddy.Com
In-Reply-To: Your message of "Thu, 09 May 1996 09:22:23 +0200."
             <9605090722.AA16761@spibm02> 
Date: Thu, 09 May 1996 10:24:04 -0500
From: Chris Garrigues <cwg@DeepEddy.Com>
Errors-To: owner-www-security@ns2.rutgers.edu

-----BEGIN PGP SIGNED MESSAGE-----

Content-Type: text/plain; charset=us-ascii

> > 
> > > another true story is that any protocol can be used to tunnel another,
> > > will say email can be used to tunnel for example telnet. but this requires
> > > help from inside.
> > 
> > eh?
> > 
> > There is no turing equivalence between protocols....If you're saying that you 
> > can run telnet on port 25 to get past packet filters, that's true, but that's 
> > not "using email to tunnel telnet".
> > 
> > You can tunnel a streaming protocol on top of a another streaming protocol, 
> > but I hardly see that this means you can run telnet on top of RFC822.
> > 
> why not?
> IP packets are IP packets.
> the one side receives this packet from the telnet server and mails it
> to the other side, which extracts this packet and sends it to the client.
> vice versa the same.
> not a performance hit, but it should work.
> give me a little time, and i'll write such a tool. :-)

Well...if it weren't for little details like timeout values, I suppose....

You do realize that you can't even run TCP over two satelite hops because the latency is greater than the timeouts, don't you?

Also, on the original claim that "any protocol can be used to tunnel another", explain to me how you're going to run a full networking protocol such as IP over a protocol like NTP which *only* passes time information.

For that matter, I'm told that IP over SNA doesn't work all that well either....:-)

Chris

- -- 
Chris Garrigues                    O-              cwg@DeepEddy.Com
  Deep Eddy Internet Consulting                     +1 512 432 4046
  609 Deep Eddy Avenue
  Austin, TX  78703-4513              http://www.DeepEddy.Com/~cwg/



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBMZIOD5aQnaaFII2dAQHLfQMAnjSf6fVHipims4RVzxsBIXL74oGpp5jq
ZSCHfB/K9BWLnGU3EBgrzB2Qm+jTwS9gkv/7pgc3tCq6kp1xc7SE2E0t94E8+zXF
UD+ARYvZe0ZDbC2X4g50Ygta0ViKth3C
=Rhr+
-----END PGP SIGNATURE-----

home help back first fref pref prev next nref lref last post