Re: ? Unsafe terminal escape sequences and ANSI codes from decryption

[email protected] (Dennis Boone) Mon, 06 Mar 2023 22:29:01 +0000
Newsgroups sci.crypt,alt.security.pgp,alt.bbs,comp.terminals,alt.computer.security
Message-ID <[email protected]>
 > For a hardware terminal it is doubtful.  The most they could do is
 > request the contents of the screen be sent to the host or auxiliary
 > port and not every terminal supports sending screen contents back to
 > the host.

Actually, one might be able to program an answerback sequence that e.g.
contained a hostile command, then triggered the terminal to send said
command.  Depending on how the particular model implements screen
content send, it might be possible to inject malicious commands via that
path too.

There are other forms of objectionable behavior.  In some environments,
causing the terminal to make a lot of noise, for example, could be an
issue.  Send your real VT100 the sequence "ESC [ 1 4 5 q" in such a
place, and the enjoy the panic of figuring out how to stop it.

De