Re: Eterm & others allow arbitrary commands execution via escape sequencies [Was: CAN-2003-0020?]
On Mon, 19 Apr 2004, Jan Minar wrote:
> On Mon, Apr 19, 2004 at 11:18:41AM -0700, Matt Zimmerman wrote:
> > On Mon, Apr 19, 2004 at 07:51:27PM +0200, Jan Minar wrote:
> >
> > > Come on, Matt: Virtually all terminal emulators are vulnerable, and the
> > > vulnerability is a common knowledge. The abovementioned paper was on
> > > Bugtraq 2003-02-24 21:02:52... Is the Security Team going to do
> > > something about it themselves (filing RC bugs at least)?
> >
> > You are part of a community, not somebody purchasing a service. Take some
> > initiative and contribute.
>
> And as a part of this community, I am saying right now: We have a big
> problem, and the problem is we don't deal with security issues known for
> decades, while happily convincing newcomers our system is fairly
> secure. It's not.
Since you are part of the community, do something to fix the problem,
instead of just whining about it. Contributing some work will buy you the
right to criticise other people's hard work, until then please point out
bugs (which is useful) but otherwise please keep your flames for yourself
and shut up.
bye
Giacomo
--
_________________________________________________________________
Giacomo Mulas <gmulas@ca.astro.it>
_________________________________________________________________
OSSERVATORIO ASTRONOMICO DI CAGLIARI
Str. 54, Loc. Poggio dei Pini * 09012 Capoterra (CA)
Tel. (OAC): +39 070 71180 248 Fax : +39 070 71180 222
Tel. (UNICA): +39 070 675 4916
_________________________________________________________________
"When the storms are raging around you, stay right where you are"
(Freddy Mercury)
_________________________________________________________________
Reply to: