Great Circle Associates Firewalls
(January 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Mitnick & the TCP Sequence Number Attack on Shimomura (
From: Ron DuFresne <dufresne @ winternet . com>
Date: Fri, 12 Jan 1996 13:51:37 -0600 (CST)
To: Bob Resino <pnh1rgr @ mclo10 . med . navy . mil>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <199601121628 . KAA23450 @ icicle>
Posted-date: Fri, 12 Jan 1996 13:51:38 -0600

On Fri, 12 Jan 1996, Bob Resino wrote:

> > Date:          Thu, 11 Jan 1996 11:50:54 -0600 (CST)
> > From:          Ron DuFresne <dufresne @
 winternet .
 com>
> > To:            Brain21 <brain21 @
 montag33 .
 residence .
 gatech .
 edu>
> > Cc:            Doug Hughes <Doug .
 Hughes @
 Eng .
 Auburn .
 EDU>, firewalls @
 GreatCircle .
 COM
> > Subject:       Re: Mitnick & the TCP Sequence Number Attack on Shimomura (LONG posting)
> 
> SNIP  
> > 
> > Agreed, either we have here an exterme case of over-confidence, 
> > misconfiguring by others really doing the security, or good old Mitnick 
> > was 'invited' in a case bordering on entrapment.  Seems very strange in 
> > either way, seems strange if not an outright blunder.
> > 
> > Later,
> > 
> > 
> > Ron Dufresne
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > "Cutting the space budget really restores my faith in humanity.  It
> > eliminates dreams, goals, and ideals and lets us get straight to the
> > business of hate, debauchery, and self-annihilation." -- Johnny Hart
> > 	***testing, only testing, and damn good at it too!***
> > 
> > OK, so you're a Ph.D.  Just don't touch anything.
> > 
> > 
> Ron, 
> In some states, there is no such thing as "Entrapment".  Such is the
> case in the Commonwealth of Virginia.  One simple warning screen like 
> the CERT P.L. 98-473 warning would preclude any claim of entrapment.
> 

Bob,

I can understand this in a purely legal sense, yet, the fact that T. S. 
had tools on a home system connected to his place of employ, with the BSD 
'r' utils enabled would lead one to think of this , in less than legal 
terms as an *invite*.  And if there was some 'reason' for leaving this 
system open, such as to 'discover' who might be 'doorknob twisting' or 
entering, in a sense, this was a setup, and thus, entrapment.  Course, 
legally, are you implying that an officer of the law can go about in 
Virginia and solicit illegal activities of felons at will?  Sounds like a 
whole new, or would it be old archaic? legal system you folks have there 
if this is so...

Later,

Ron Dufresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.


Indexed By Date Previous: Re: MSN proxy?
From: "Richard Giering Jr." <Richard_Giering_Jr . . @ cch . com>
Next: Re: "Title for Firewall Admin?
From: "Bryan D. Boyle" <bdboyle @ maverick . erenj . com>
Indexed By Thread Previous: Re: Mitnick & the TCP Sequence Number Attack on Shimomura (
From: "Bob Resino" <pnh1rgr @ mclo10 . med . navy . mil>
Next: securid and wu-ftp
From: Brian Murrell <murrell @ bctel . net>

Google
 
Search Internet Search www.greatcircle.com