Great Circle Associates Firewalls
(February 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: questions about security & WWW browsers
From: nreadwin @ london . micrognosis . com (Neil Readwin)
Date: Mon, 20 Feb 1995 16:17:47 +0000 (GMT)
To: lavondes @ tidtest . total . fr
Cc: firewalls @ greatcircle . com
In-reply-to: <9502201408 . AA06931 @ tidtest . total . fr> from "Michel Lavondes" at Feb 20, 95 02:08:32 pm

Michel Lavondes writes:
> DEC VT-2xx can receive a string and send it back as "keyboard input."
> (I think it's done with UDKs, but I didn't check)

Yes, this applies to the VT200 (or probably any newer DEC terminal).  I
believe the sequence is ENQ (Ctrl/E). Note that DEC understood enough
about what they were doing to ensure that the response cannot be set by
the host computer - only the user at the terminal can do it. I believe
that some people who built VTxxx emulators did not understand the issue
and so added an 'enhancement' to allow the response to set by the host
too.

Getting completely off the subject of firewalls ... if I recall
correctly it was possible to set up your terminal so that the response
contained <DEL>username<CR>password<CR> and then you could log in to a
VMS box by typing <ENQ> (which would get echoed and so cause the
response string to get sent). Never used it myself but I once had to
explain to a somewhat spooked friend who had taken over the desk of
a dead man (literally) why his name kept spontaneously appearing
at the command line.
-- 
 nreadwin @
 micrognosis .
 co .
 uk       Phone: +1 908 855 1221 x519
 Anything is a cause for sorrow that my mind or body has made


Follow-Ups:
References:
Indexed By Date Previous: Re: NCSC Evaluated "Firewall"
From: z056716 @ uprc . com (LaCoursiere J. D. (Jeff))
Next: Re: IP source routing...
From: Christopher Klaus <cklaus @ shadow . net>
Indexed By Thread Previous: Re: questions about security & WWW browsers
From: Darren Reed <avalon @ coombs . anu . edu . au>
Next: Re: questions about security & WWW browsers
From: Marcus J Ranum <mjr @ tis . com>

Google
 
Search Internet Search www.greatcircle.com