X-Message-Index: 052 X-Message-Prev: 051 X-Message-Next: 054 X-Thread-Prev: 400 X-Thread-Next: 055 From: Edward Vielmetti To: phage X-To: tytso@athena.mit.edu, steve@umiacs.UMD.EDU, phage Subject: NNTP vulnerability, and Re: Disassembled virus? Date: Sat, 05 Nov 88 16:02:56 -0500 X-Date: Sat 16:02:56 05/11/1988 EST no list is secure, especially in the presence of broken mailers. If you believe otherwise then you don't read mailer-daemon mail. Postel has called for a Virus RFC. I think that's a fine idea. I would like to see a copy of the virus myself, since there are a lot of infectable machines on this campus that weren't hit for one reason or another, and more machines coming on line every day. If we want a secure meeting, I would argue that the only way to do it is in person. Perhaps the internet engineering task force is the appropriate body to figure out a meeting time and place and invite people to come. I am concerned that the next attack will hit the usenet news network - there are a lot of machines running NNTP in the world. Are there any known NNTP security holes, and how can I stop them up? --Ed