Public SourceMage Discussion List

[Pierre Abbat <phma AT webjockey.net>]

On Tuesday 01 April 2003 11:01, Dufflebunk wrote:
> A masive trojan has been discovered in bash v2.05b. It allows remote
> access to any machine via bash's /dev/tcp virtual devices if your eth0
> is connected to the internet. There is, of course, a blurb on
> securityfocus and bugtraq, but I'm too lazy to find it.
>
> Since GNU seems to be as slow as usual, the sorcery team is planning on
> accelerating out rewrite schedule and starting today. We have decided to
> rewrite in C# as it has the portability, low level, and network
> facilities that we require.

C# or Bb, that's what I say.

phma
-- 
.i toljundi do .ibabo mi'afra tu'a do
.ibabo damba do .ibabo do jinga
.icu'u la ma'atman.
>From wyatt AT draggoo.com  Wed Apr  2 02:18:00 2003
Return-Path: <wyatt AT draggoo.com>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from c001.snv.cp.net (h020.c001.snv.cp.net [209.228.32.134])
        by happyhouse.metalab.unc.edu (Postfix) with SMTP id AC03F20014
        for <sm-discuss AT lists.ibiblio.org>;
        Wed,  2 Apr 2003 02:17:59 -0500 (EST)
Received: (cpmta 7188 invoked from network); 1 Apr 2003 23:17:18 -0800
Received: from 209.228.32.128 (HELO mail.draggoo.com.criticalpath.net)
        by smtp.register-admin.com (209.228.32.134) with SMTP;
        1 Apr 2003 23:17:18 -0800
X-Sent: 2 Apr 2003 07:17:18 GMT
Received: from [64.81.38.53] by mail.draggoo.com with HTTP; Tue,
    01 Apr 2003 23:17:18 -0800 (PST)
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
To: sm-discuss AT lists.ibiblio.org
From: "Wyatt Draggoo" <wyatt AT draggoo.com>
Subject: Re: [SM-Discuss] Source Mage Developer Key Signing
X-Sent-From: wyatt AT draggoo.com
Date: Tue, 01 Apr 2003 23:17:18 -0800 (PST)
X-Mailer: Web Mail 5.2.3-0_sol28
Message-Id: 
<20030401231718.27004.h014.c001.wm AT mail.draggoo.com.criticalpath.net>
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2003 07:18:00 -0000

> I have setup a channel (not very well, never done that before) for Source
> Mage developers (and users, if they want) to have a virtual key signing
> party!  This way, we can develop a trust network through GPG, and also to
> have fun.  I will provide virtual cake and virtual punch (if you're
> allergice to any of the virtual ingredients, I can conjure up something
> you're not virtually allergic to).
> 
> Join #smgl-keysigning on irc.freenode.net and have your key signed today!

Not that I'm opposed to key-signing, but isn't the point of a key-signing
party to physically presesnt some sort of evidence you are who you are?  We
has one at a local LUG where everyone brought their passports and drivers'
licenses, and each verified the others, and *then* signed their keys.

I'm going to start preparing my virtual passport and license now... :)

Wyatt (1 of 1, that I know of...)

--
Wyatt Draggoo
>From Sorcerer AT TheDragonsEdge.com  Wed Apr  2 02:35:09 2003
Return-Path: <Sorcerer AT TheDragonsEdge.com>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from linux.TheDragonsEdge.com (host12.dsl1.blackfoot.net
        [12.32.44.12])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 66EC220014
        for <sm-discuss AT lists.ibiblio.org>;
        Wed,  2 Apr 2003 02:35:09 -0500 (EST)
Received: from linux (localhost [127.0.0.1])
        by linux.TheDragonsEdge.com (Postfix) with ESMTP id 42B7C12B7E
        for <sm-discuss AT lists.ibiblio.org>;
        Wed,  2 Apr 2003 00:35:06 -0700 (MST)
Date: Wed, 2 Apr 2003 00:34:35 -0700
From: "Bearcat M. Sandor" <Sorcerer AT TheDragonsEdge.com>
To: sm-discuss AT lists.ibiblio.org
Subject: Re: [SM-Discuss] SECURITY ISSUE
Message-ID: <20030402073435.GA4397@linux>
References: <1049212883.23290.5.camel AT dufflebunk.homeip.net>
        <200304012209.47208.phma AT webjockey.net>
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=ISO-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <200304012209.47208.phma AT webjockey.net>;
        from phma AT webjockey.net on Tue, Apr 01, 2003 at 20:09:47 -0700
X-Mailer: Balsa 2.0.9
Lines: 30
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Sorcerer AT TheDragonsEdge.com
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2003 07:35:10 -0000

I must strongly disagree.  Visual Basic.Net is the only way to go if 
Source Mage is to be respected in the Linux community.

On 2003.04.01 20:09 Pierre Abbat wrote:
> On Tuesday 01 April 2003 11:01, Dufflebunk wrote:
> > A masive trojan has been discovered in bash v2.05b. It allows remote
> > access to any machine via bash's /dev/tcp virtual devices if your
> eth0
> > is connected to the internet. There is, of course, a blurb on
> > securityfocus and bugtraq, but I'm too lazy to find it.
> >
> > Since GNU seems to be as slow as usual, the sorcery team is planning
> on
> > accelerating out rewrite schedule and starting today. We have
> decided to
> > rewrite in C# as it has the portability, low level, and network
> > facilities that we require.
> 
> C# or Bb, that's what I say.
> 
> phma
> --
> .i toljundi do .ibabo mi'afra tu'a do
> .ibabo damba do .ibabo do jinga
> .icu'u la ma'atman.
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> 
>From jason AT flattfamily.com  Wed Apr  2 03:49:04 2003
Return-Path: <jason AT flattfamily.com>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from 100m.mpr200-1.esr.lvcm.net (100m.mpr200-1.esr.lvcm.net
        [24.234.0.78])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id ACDA420038
        for <sm-discuss AT lists.ibiblio.org>;
        Wed,  2 Apr 2003 03:49:03 -0500 (EST)
Received: from 192.168.1.63 (cm063.45.234.24.lvcm.com [24.234.45.63])
        by 100m.mpr200-1.esr.lvcm.net (Mirapoint Messaging Server MOS 2.9.3.5)
        with ESMTP id AVY91927;
        Wed, 2 Apr 2003 00:49:02 -0800 (PST)
From: Jason Flatt <jason AT flattfamily.com>
To: sm-discuss AT lists.ibiblio.org
Subject: Re: [SM-Discuss] SECURITY ISSUE
Date: Wed, 2 Apr 2003 00:49:55 -0800
User-Agent: KMail/1.5.1
References: <1049212883.23290.5.camel AT dufflebunk.homeip.net>
In-Reply-To: <1049212883.23290.5.camel AT dufflebunk.homeip.net>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200304020049.56173.jason AT flattfamily.com>
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: jason AT flattfamily.com
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2003 08:49:04 -0000

On Tuesday 01 April 2003 08:01 am, Dufflebunk wrote:
> A masive trojan has been discovered in bash v2.05b. It allows remote
> access to any machine via bash's /dev/tcp virtual devices if your eth0
> is connected to the internet. There is, of course, a blurb on
> securityfocus and bugtraq, but I'm too lazy to find it.
>
> Since GNU seems to be as slow as usual, the sorcery team is planning on
> accelerating out rewrite schedule and starting today. We have decided to
> rewrite in C# as it has the portability, low level, and network
> facilities that we require.


Woo, hoo!  It's about time you guys woke up and got with the plan.


-- 
Jason Flatt
E-mail (remove the spaces): jason @ flattfamily . com
Voice: +1 702 870 6622
Fax:   +1 702 870 3883
Snail Mail: PO Box 44265, Las Vegas, NV 89116-2265, USA