Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.folklore.computers > #148656
| From | "Rod Speed" <rod.speed.aaa@gmail.com> |
|---|---|
| Newsgroups | alt.folklore.computers |
| Subject | Re: The joy of simplicity? |
| Date | 2015-07-21 05:52 +1000 |
| Message-ID | <d151rhFgln4U1@mid.individual.net> (permalink) |
| References | (16 earlier) <ttnn7c-djp.ln1@sambook.reistad.name> <d10470F95frU1@mid.individual.net> <PM00051B39D5D75EA9@aca2e736.ipt.aol.com> <d12f45Fr3gcU1@mid.individual.net> <PM00051B4E99E3812C@aca24085.ipt.aol.com> |
"jmfbahciv" <See.above@aol.com> wrote in message news:PM00051B4E99E3812C@aca24085.ipt.aol.com... > Rod Speed wrote: >> >> >> "jmfbahciv" <See.above@aol.com> wrote in message >> news:PM00051B39D5D75EA9@aca2e736.ipt.aol.com... >>> Rod Speed wrote: >>>> Morten Reistad <first@last.navn> wrote >>>>> Rod Speed <rod.speed.aaa@gmail.com> wrote >>>>>> jmfbahciv <See.above@aol.com> wrote >>>>>>> Peter Flass wrote >>>>>>>> jmfbahciv <See.above@aol.com> wrote >>>>>>>>> Andrew Swallow wrote >>>>>>>>>> jmfbahciv wrote >>>>>>>>>>> Rod Speed wrote >>>>>>>>>>>> jmfbahciv <See.above@aol.com> wrote >>>>>>>>>>>>> Andrew Swallow wrote >>>> >>>>>>>>>>>>>> This will help but unfortunately the database you >>>>>>>>>>>>>> are keeping secret ends up inside the sandbox. >>>> >>>>>>>>>>>>> Implement a file daemon like we did on TOPS-10. >>>> >>>>>>>>>>>> Doesn't do a damned thing about the problem he is talking >>>>>>>>>>>> about. >>>> >>>>>>>>>>> Of course it can. The file daemone can do anything one wants >>>>>>>>>>> it to. In order to circumvent the security, a cracker has to >>>>>>>>>>> patch >>>>>>>>>>> the monitor to redirect the IPCF messages _and_ its contents. >>>> >>>>>>>>>> Can the virus tell the daemone to get the next database record? >>>>>>>>>> If so repeat until the entire database has been extracted. >>>> >>>>>>>>> Only if the file daemon is designed to allow such access without >>>>>>>>> security. >>>> >>>>>>>>> Using a file daemon to access otherwise protected files from a >>>>>>>>> user, >>>>>>>>> including an app, allows access without the user/app having to >>>>>>>>> have >>>>>>>>> the system privileges one would need if a daemon wasn't available. >>>> >>>>>>>>> The sample JMF wrote, was designed to extend access to files. >>>>>>>>> There isn't anything preventing a daemon from accessing the >>>>>>>>> contents of files. The neat thing was that you could protect a >>>>>>>>> file from [1,2] accessing it. [1,2] was the equivalent user to >>>>>>>>> Unix' sudo (I think that's what it's called.) >>>> >>>>>>>> A daemon has nothing to do with this. The file system has to run >>>>>>>> at a higher privilege level (which most do) and have no bugs or >>>>>>>> security holes (which doesn't seem to be true). The problem seems >>>>>>>> to be that unauthorized code takes advantage of holes in the system >>>>>>>> get an elevated privilege level and access things it shouldn't. >>>> >>>>>>> If you have a file daemon, you can protect all files >>>>>>> and directories from any access at all times. >>>> >>>>>> There you go, utterly mangling the terminology just like you always >>>>>> do. >>>> >>>>> No, she has just given some references to >>>>> som DEC systems that have fallen into disuse. >>>> >>>> She isn't doing that in this case with her claim that 'you can >>>> protect all files and directories from any access at all times' >> >>> I did this every day at work. >> >> You never protected' all files and directories from any access at all >> times' >> >>> Even the god ppn [1,2] couldn't access my files if I didn't want them >>> to. >> >> That is nothing even remotely like 'all files >> and directories from any access at all times' >> >>> The ones I did allow to access left a log in my directory. >> >> Not true of other access to other files. And that approach >> requires someone or something to check those logs anyway. > Yes, which I did. And you have fuck all real security for the user who doesn’t. That's why the Apple approach with iOS works much better now. > I was maintainer of the Black Packs. I assigned who could access > what. Noone else was allowed particular types of accesses. > I also protected my ppn and its subdirectories from all accesses. And the user doesn’t have to do that with iOS, that is the default and you have to explicitly give permission to anything that wants access to any of your data and files. That is a much better approach.
Back to alt.folklore.computers | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: The joy of simplicity? Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-07-08 00:27 -0300
Re: The joy of simplicity? Anne & Lynn Wheeler <lynn@garlic.com> - 2015-07-08 09:32 -0700
Re: The joy of simplicity? "ratsack" <ratgsack281@nospam.com> - 2015-07-10 05:28 +1000
Re: The joy of simplicity? hancock4@bbs.cpcn.com - 2015-07-08 09:54 -0700
Re: The joy of simplicity? scott@slp53.sl.home (Scott Lurndal) - 2015-07-08 17:43 +0000
Re: The joy of simplicity? Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-07-08 15:48 -0300
Re: The joy of simplicity? hda <agent700@ay.invalid> - 2015-07-08 22:03 +0200
Re: The joy of simplicity? Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-07-09 03:14 -0300
Re: The joy of simplicity? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-07-09 07:38 +0000
Re: The joy of simplicity? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-07-09 17:40 +0000
Re: The joy of simplicity? Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-07-09 16:32 -0300
Re: The joy of simplicity? "ratsack" <ratgsack281@nospam.com> - 2015-07-10 05:35 +1000
Re: The joy of simplicity? Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-07-09 16:51 -0300
Re: The joy of simplicity? Andrew Swallow <am.swallow@btinternet.com> - 2015-07-10 00:50 +0100
Re: The joy of simplicity? Peter Flass <peter_flass@yahoo.com> - 2015-07-10 00:27 +0000
Re: The joy of simplicity? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-07-10 16:36 +0000
Re: The joy of simplicity? Andrew Swallow <am.swallow@btinternet.com> - 2015-07-10 19:01 +0100
Re: The joy of simplicity? Stephen Sprunk <stephen@sprunk.org> - 2015-07-10 13:13 -0500
Re: The joy of simplicity? Stephen Sprunk <stephen@sprunk.org> - 2015-07-10 13:20 -0500
Re: The joy of simplicity? Peter Flass <peter_flass@yahoo.com> - 2015-07-10 18:59 +0000
Re: The joy of simplicity? Andrew Swallow <am.swallow@btinternet.com> - 2015-07-10 21:08 +0100
Re: The joy of simplicity? Morten Reistad <first@last.navn> - 2015-07-11 00:42 +0200
Re: The joy of simplicity? Andrew Swallow <am.swallow@btinternet.com> - 2015-07-11 20:47 +0100
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-12 12:53 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-13 05:40 +1000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-14 12:02 +0000
Re: The joy of simplicity? Andrew Swallow <am.swallow@btinternet.com> - 2015-07-14 13:32 +0100
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-15 12:19 +0000
Re: The joy of simplicity? Peter Flass <peter_flass@yahoo.com> - 2015-07-15 12:31 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-17 05:49 +1000
Re: The joy of simplicity? Morten Reistad <first@last.navn> - 2015-07-17 18:43 +0200
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-19 09:01 +1000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-19 13:25 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-20 06:20 +1000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-20 13:29 +0000
Re: The joy of simplicity? Peter Flass <peter_flass@yahoo.com> - 2015-07-20 15:26 +0000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-21 12:53 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-21 05:52 +1000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-19 09:49 +1000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-19 13:25 +0000
Re: The joy of simplicity? Morten Reistad <first@last.navn> - 2015-07-19 18:15 +0200
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-20 13:29 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-21 05:49 +1000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-20 06:38 +1000
Re: The joy of simplicity? jmfbahciv <See.above@aol.com> - 2015-07-20 13:29 +0000
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-21 05:55 +1000
Re: The joy of simplicity? "Hank" <hfd543@nospam.com> - 2015-07-12 06:00 +1000
Re: The joy of simplicity? Morten Reistad <first@last.navn> - 2015-07-11 00:38 +0200
Re: The joy of simplicity? "Charles Richmond" <numerist@aquaporin4.com> - 2015-07-10 15:27 -0500
Re: The joy of simplicity? Dave Garland <dave.garland@wizinfo.com> - 2015-07-11 00:18 -0500
Re: The joy of simplicity? "Rod Speed" <rod.speed.aaa@gmail.com> - 2015-07-11 19:22 +1000
Re: The joy of simplicity? Gene Wirchenko <genew@telus.net> - 2015-07-10 17:53 -0700
Re: The joy of simplicity? "Osmium" <r124c4u102@comcast.net> - 2015-07-10 22:22 -0500
Re: The joy of simplicity? Gene Wirchenko <genew@telus.net> - 2015-07-10 23:39 -0700
Re: The joy of simplicity? simon@twoplaces.co.uk (Simon Turner) - 2015-07-10 08:27 +0100
Re: The joy of simplicity? Peter Flass <peter_flass@yahoo.com> - 2015-07-09 00:29 +0000
Re: The joy of simplicity? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-07-09 07:38 +0000
Re: The joy of simplicity? Daiyu Hurst <daiyu.hurst@gmail.com> - 2015-07-08 12:57 -0700
csiph-web