[105793] in North American Network Operators' Group
Re: DNS and potential energy
daemon@ATHENA.MIT.EDU (Daniel Hagerty)
Tue Jul 1 12:16:29 2008
To: Rob Pickering <rob@pickering.org>
From: Daniel Hagerty <hag@linnaean.org>
Date: 01 Jul 2008 12:16:20 -0400
In-Reply-To: Rob Pickering's message of "Tue, 01 Jul 2008 15:28:56 +0100"
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
Rob Pickering <rob@pickering.org> writes:
> Or .com. Oddly enough I just now found a Windows box and typed
> "command.com" in a browser URL bar and it did what I expected, when I
> typed the same thing at a cmd prompt it did something different and I
> expected that too.
1. Copy \windows\system32\cmd.exe to the desktop.
2. Run internet exploder.
3. Type "cmd.exe" in the address bar and observe what happens.
I don't know about you, but given ie's default download location, and
your (apparently common) erroneous expectation, this looks ripe for
social engineering to me.