HP3000-L Archives

March 1999, Week 1

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"Stigers, Greg [And]" <[log in to unmask]>
Reply To:
Stigers, Greg [And]
Date:
Fri, 5 Mar 1999 13:59:56 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (35 lines)
X-no-Archive:yes
To answer the questions as asked... An attack (assuming that you mean
unauthorized successful access, and not denial of service) would not be
undetectable. The 3000, like most systems, does have certain user ids that
would be expected defaults and obvious points to try to attack, although
nothing like a guest or anonymous id. And the default prompts tell our
hypothetical hacker too much about what they should be doing to sign on
(although those can be changed, and third-party security offerings can
vastly improve security, even for known vulnerabilities such as ftp and
telnet). More and more 3000s are not only networked but connected to the
Internet. Not everyone uses firewalls, and a few brave souls question the
benefit of doing so in every case, where other security is properly in use.
The 3000 does have several logs, some events in an attack would be logged,
and others can be configured. Not everyone audits their logs. And identities
can of course be concealed.

I may be out of line for pointing out the following, even if it was invited,
and if I am, an off-list dressing down would not be inappropriate. But I
think it might be worth considering the following quotes from this poster,
as it might inform our understanding of the questions and how one might
choose to reply. The one that invited these observations, from the "HP 3000
Outdated" thread:
- And I take no offense to everyone's scrutiny.
- One must be willing to get their "manhood" stepped on after making such a
statement to this kind of newsgroup:)

While it is not my intention to step on any part of this poster or his
person, the following comes from two other postings to that thread:
- I would also be biased if I had spent the greater part of my life
specializing in one platform.
and
- But I do believe that it is "sunset technology" due to the
proprietary-ness of the operating system.
- Simply put, it is time to retool rather than repair.

ATOM RSS1 RSS2