Re: Quote from Kashpureff / Re: question about per. hack

[Stephen Sprunk <sprunk () csi net>]

You call the long-known and well-publisized attack against servers not
running current versions of essential system software elegant?

People, the net is not falling apart because Kashpureff knows how to fake a
glue record; people who don't keep up with the security of their systems
are (of course) having their security compromised.

This is not an operational issue; this is a sysadmin-being-lazy issue.
Please take it off NANOG.

Stephen


At 15:32 07-22-97 -0500, you wrote:
> I'm sick of paying the NIC to, and in reality I think Kashpureff's hack is
> pretty elegant.


  However, I disagree that capitalism is /pure evil/.  Once
> upon a time the net was driven by research and academia, but that day has
> passed.  The net as it stands now is in poor shape, and a with the latest
> intense round of backhoe attacks and DNS problems the enormous amount of
> capital invested in the internet will have to be protected.  This is when
> those capitalist companies will finally start to hash out technologies
> that make the internet more redundandt.  The problem and, I
> believe, the solution lies with the root name servers.  Until people
> accept and use more than the current InterNIC root server we won't be able
> to announce any more domain name strategies.
>
> Aaron Abelard / aaron () abelard com / http://www.abelard.com/
>     "Nunc Lento Sunito Dicunt, Moreris" (Donne)
>         "Lasciate tutto speranza, voiche entrate" (Dante)
>             "kinda like a cloud i was up way up in the sky" (NIN)
>                 "Once more unto the breech, dear friend" (Shakespeare)
--
Unsolicited commercial/propaganda email subject to legal action.  Under US
Code Title 47, Sec.227(a)(2)(B), Sec.227(b)(1)(C), and Sec.227(b)(3)(C), a
State may impose a fine of not less than $500 per message.  Read the full
text of Title 47 Sec 227 at http://www.law.cornell.edu/uscode/47/227.html