Vulnerability Development mailing list archives

Re: possible AIM dos


From: Matthew Sachs <matthewg () zevils com>
Date: Tue, 9 Oct 2001 22:10:53 -0400

On Tue, Oct 09, 2001 at 09:43:08PM +0000, Bryan wrote:
You have to get an IM from a person in order for the warn button to allow
you to press it.  However, is it possible to send a warning code via some
program other than their software?  Is it possible to send warnings with a
specially made program without needing messages from people first...

Nope, the restrictions are enforced at the protocol level.  That is,
the OSCAR servers won't let you warn people who haven't sent you IMs.

just a thought.

-- 
Matthew Sachs   <matthewg () zevils com>  <matthewg () wombatbanana com>
http://www.zevils.com/ * GPG key: 0x600A0342 * PGP key: 0x93EA1151
#The original nonstandard deviant# (((T^E)%(PQ))^D)%(PQ) = RSA-NOP


Current thread: