-----BEGIN PGP SIGNED MESSAGE----- On Sat, 25 Apr 1998, Anthony Fok wrote:
> On Fri, Apr 24, 1998 at 04:03:58PM -0700, [EMAIL PROTECTED] wrote: > > It is already packaged by John Hasler <[EMAIL PROTECTED]> in March. :-) > [snip] > > Nice idea. :-) The current mlddc package does nothing like this, i.e., the > user has to add mlddc to ip-up (and perhaps ip-down? Nah, too late) > manually. Maybe you could discuss with John to see if you could improve the > package? :-) > > Welcome to Debian! :-) > I also found one thing -- mlddc is insecure. That's right, it's subject to buffer overflow; it uses gets in its source. If john used the provided binary for the .deb, this is a security hazard. I am currently experimenting with the use of a perl module designed for interface to the monolith NIC -- it uses libwww-perl and therefore could be extended to use some of monolith's other services -- such as password changes and such. Otherwise I could simply hack the mlddc source code and eliminate the security breach, as the perl client is somewhat slower. - --------------------------------------------------------------------------- Aaron Van Couwenberghe -- [EMAIL PROTECTED], [EMAIL PROTECTED] |---> Debian GNU/Linux: http://www.debian.org ftp://ftp.debian.org <-----\ |-> Proud competitor in the race for World Domination <-------------------| Illusion web designs - http://www.sonic.net/~vanco - To be launched by June PGP KeyID: 41119089 UserID: Aaron Van Couwenberghe <[EMAIL PROTECTED]> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3a mQCNAzU9DnIAAAEEAMPBOCQh5zzgJCh7hz7M20bL+gztIn1+ldPNq8AcN7s16XHa sgWQoK/Yz/15HnClqDATQhqItG4+4SZDW/VywLgDUxfa+WXPqOFGdUv8AODAnWiz doOI58TajZTV4gyvp2fCH2sjvOOpfZ1AFn1m3Z6kT3c0otbNSfoZ48BBEZCJAAUR tChBYXJvbiBWYW4gQ291d2VuYmVyZ2hlIDx2YW5jb0Bzb25pYy5uZXQ+iQCVAwUQ NT0OcvoZ48BBEZCJAQENBQP9G/3B3HHQOYaea6ep1Z+0ZR/BtK3o2bPPdhVFEksT vwlvDYM01RouZoWZ91ixJVTp5r+ovq/4eFnrVk1IxjK6lEeXtKixrWKuyv3xVBa5 1snIrslc4t6zahBJx6i9OESgK69BDi0MMA8Y5jzz6I38vCZS1cFjwGZvzyINJEaF +Fg= =56FS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: noconv iQCVAwUBNUGZi/oZ48BBEZCJAQEwlAP9ESM7t+rS8qVa49pZtMMiXrQGRFUCsigt iS/AgPQxFspskZRESq4i5uxThBUm8WcN2l1AzRGug2fXYjUUdCSKMtJ2xCRyGNda YakNGYA2bHNm8Fo/OHpGsVa++KJJwnt5H7n9lHpheajAZp98zQo2XpBzwVwWTqcM rm51wGKSgeo= =PLSI -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]