[Full-Disclosure] irc over ssl

2004-05-24 Thread Giannakis Eleftherios
Hello everybody, are there any known issues concerning rootkits, backdoors, cmd execution concerning an irc(with ssl) client ? I use the irssi client to conect to a irc server with ssl.Is there a way for the admins of the irc server to open/intrude somehow to my pc(through the high port that th

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Maarten
On Monday 24 May 2004 12:41, Giannakis Eleftherios wrote: > Hello everybody, > > are there any known issues concerning rootkits, backdoors, cmd execution > concerning an irc(with ssl) client ? I use the irssi client to conect to a > irc server with ssl.Is there a way for the admins of the irc serve

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Dave Howe
Giannakis Eleftherios wrote: > are there any known issues concerning rootkits, backdoors, cmd > execution concerning an irc(with ssl) client ? The answer to the question as posed is No However, the *real* answer to the question is to componentize the four items we are discussing, and query each ind

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Mortis
> are there any known issues concerning rootkits, backdoors, > cmd execution concerning an irc(with ssl) client ? I use the > irssi client to conect to a irc server with ssl.Is there a way for > the admins of the irc server to open/intrude somehow to my > pc(through the high port that the client op

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Denis Solaro
On Mon, 24 May 2004 13:16:40 +0100 "Dave Howe" <[EMAIL PROTECTED]> wrote: > Giannakis Eleftherios wrote: > > are there any known issues concerning rootkits, backdoors, cmd > > execution concerning an irc(with ssl) client ? > The answer to the question as posed is No > However, the *real* answer to

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Ron DuFresne
[SNIP] > > Unfortunately because of mIrc's reputation, some high management decided to have > use disuse it Great, especially since we are all Solaris or Cisco kids and > nothing to do with Microsoft based half compliant IRC stuff. > > So if you can get the author or mIrc extradited t

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread adam
Just because they're using mIRC, doesn't mean that they aren't unix/cisco tech geeks. Ever consider that they might have run Windows on their workstations at work? And even so using the clients that have been ported to Windows might be an even worse idea because of bugs in the ported c

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread adam
Do you really think that they would be using mIRC if they had unix on their workstations anyways? Maybe reading comprehension isn't one of your best skills. Thanks Again! On Mon, 24 May 2004, adam wrote: Just because they're using mIRC, doesn't mean that they aren't unix/cisco

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Valdis . Kletnieks
On Mon, 24 May 2004 15:37:05 EDT, adam said: > Ever consider that they might have run Windows on their workstations at work? Hmm.. so the company is hiring them as a "unix/cisco tech weenie" and then forcing them to use Windows? That sounds like the set-up for either a Dilbert or a UserFriendly

RE: [Full-Disclosure] irc over ssl

2004-05-24 Thread Rick Thompson
04 3:37 PM To: Ron DuFresne Cc: [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] irc over ssl Just because they're using mIRC, doesn't mean that they aren't unix/cisco tech geeks. Ever consider that they might have run Windows on their workstati

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Maarten
On Monday 24 May 2004 21:37, adam wrote: > Just because they're using mIRC, doesn't mean that they aren't > unix/cisco > tech geeks. Ever consider that they might have run Windows on their > workstations at work? And even so using the clients that have been ported > to Windows might

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Ron DuFresne
I think if they were savvy unix/ISO users, they certaily would have at least a linux/*bsd partition to work from. Thanks, Ron DuFresne On Mon, 24 May 2004, adam wrote: > Do you really think that they would be using mIRC if they had unix on > their workstations anyways? Maybe reading compreh

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Denis Solaro
On Mon, 24 May 2004 16:49:34 -0400 adam <[EMAIL PROTECTED]> wrote: > Do you really think that they would be using mIRC if they had unix on > their workstations anyways? Maybe reading comprehension isn't one of > your best skills. > He he he... Yep, nope, I mean no.. wait, yes. Ron DuFresne

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Denis Solaro
On Mon, 24 May 2004 17:15:10 -0500 (CDT) Ron DuFresne <[EMAIL PROTECTED]> wrote: > > I think if they were savvy unix/ISO users, they certaily would have at > least a linux/*bsd partition to work from. When a place gets money to throw at 100+ solaris boxes and Cisco gear, permanent leased lines,

RE: [Full-Disclosure] irc over ssl

2004-05-24 Thread Lionel Hendricks
adam ||Cc: Ron DuFresne; [EMAIL PROTECTED] ||Subject: Re: [Full-Disclosure] irc over ssl || ||On Mon, 24 May 2004 15:37:05 EDT, adam said: || ||> Ever consider that they might have run Windows on their workstations at ||work? || ||Hmm.. so the company is hiring them as a "unix/cisco tech weenie&qu

Re: [Full-Disclosure] irc over ssl

2004-05-24 Thread Ron DuFresne
> > But it's true that IRC is fun and still can be a great help in WAN management > coordination... same as talkd. It's just one of those things that have been > frowned upon by the hordes of non Unix people that came in IT later and was > re-invented the wrong way in group-ware stuff. As a re

RE: [Full-Disclosure] irc over ssl

2004-05-24 Thread Ron DuFresne
On Tue, 25 May 2004, Lionel Hendricks wrote: > Actually my environment is over 99% windows workstations. We access all of > the *nix boxes via SSL from W2K/XP. We've got *nix boxes for everything from > Web & Mail, to Databases and IDS's... you name it (there are also Windows > counterparts to eac

Re: [Full-Disclosure] irc over ssl

2004-05-25 Thread Dave Howe
> Hmm.. so the company is hiring them as a "unix/cisco tech weenie" > and then forcing them to use Windows? *Sigh* you have given a name to my Ongoing Horror. I am *forced* to use MS Office - Word, Excel and Outlook - on Windows. My job dutes are to look after the Solaris, HPUX, Compaq Tru64 and

RE: [Full-Disclosure] irc over ssl

2004-05-25 Thread Felipe Angoitia
infect my box with M$ products anyway. -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de Dave Howe Enviado el: martes, 25 de mayo de 2004 10:59 Para: Email List: Full Disclosure Asunto: Re: [Full-Disclosure] irc over ssl > Hmm.. so the company is hiring them a

Re: [Full-Disclosure] irc over ssl

2004-05-25 Thread Denis Solaro
On Tue, 25 May 2004 09:59:09 +0100 "Dave Howe" <[EMAIL PROTECTED]> wrote: > > Hmm.. so the company is hiring them as a "unix/cisco tech weenie" > > and then forcing them to use Windows? > *Sigh* you have given a name to my Ongoing Horror. > > I am *forced* to use MS Office - Word, Excel and Outlo

Re: [Full-Disclosure] irc over ssl

2004-05-25 Thread Dave Howe
> What do they expect you to do you X Windows work with then? TBH - they don't, and I don't. on the rare occasions I need to use X, I walk to the server room and use the console. I could also use xVNC, or cygwin/x , but I don't use X often enough for it to matter. There are also a few CDs for the

Re: [Full-Disclosure] irc over ssl

2004-05-25 Thread Ron DuFresne
On Tue, 25 May 2004, Dave Howe wrote: > > Hmm.. so the company is hiring them as a "unix/cisco tech weenie" > > and then forcing them to use Windows? > *Sigh* you have given a name to my Ongoing Horror. > > I am *forced* to use MS Office - Word, Excel and Outlook - on Windows. My > job dutes are

RE: [Full-Disclosure] irc over ssl

2004-05-25 Thread Ng, Kenneth (US)
PROTECTED] Subject: Re: [Full-Disclosure] irc over ssl On Mon, 24 May 2004 15:37:05 EDT, adam said: > Ever consider that they might have run Windows on their workstations at work? Hmm.. so the company is hiring them as a "unix/cisco tech weenie" and then forcing them to use Windows?