Full Disclosure mailing list archives
Re: AFS - The Ultimate Sulution? -- What is the point?
From: "マグロ原子" <atoom.tonijn () gmail com>
Date: Fri, 15 Sep 2006 13:32:49 +0200
In-Reply-To: <4509C2FE.8020104 () observed de> I don't really see the point... Possible vulnerabilities (if I didn't horribly misunderstand something): *The AFS server would still need to be updated to keep it secure. *If the imaged OS is rootable: **The AFS clients that load the images could be replaced by phishnets. **The attacker could pose as the user having access to Kerberos credentials. (So rm -r / would delete the users "securely kept files") Or do users only have read-only access to their files?? That doesn't seem useful. Nyoro~n _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: AFS - The Ultimate Sulution? -- What is the point? マグロ原子 (Sep 15)
- Re: AFS - The Ultimate Sulution? -- What is the point? Dean Pierce (Sep 15)
- Re: AFS - The Ultimate Sulution? -- What is the point? Dude VanWinkle (Sep 16)
- Re: AFS - The Ultimate Sulution? -- What is the point? Paul Sebastian Ziegler (Sep 17)
- Re: AFS - The Ultimate Sulution? -- What is the point? Valdis . Kletnieks (Sep 17)
- Re: AFS - The Ultimate Sulution? -- What is the point? Brandon S. Allbery KF8NH (Sep 17)
- Re: AFS - The Ultimate Sulution? -- What is the point? Brian Eaton (Sep 17)
- Re: AFS - The Ultimate Sulution? -- What is the point? Brandon S. Allbery KF8NH (Sep 17)
- Re: AFS - The Ultimate Sulution? -- What is the point? Dude VanWinkle (Sep 16)
- Re: AFS - The Ultimate Sulution? -- What is the point? Dean Pierce (Sep 15)