Re: ? Unsafe terminal escape sequences and ANSI codes from decryption

[email protected] (Richard) Tue, 7 Mar 2023 05:37:39 -0000 (UTC)

Newsgroups	sci.crypt,alt.security.pgp,alt.bbs,comp.terminals,alt.computer.security
Organization	multi-cellular, biological
Message-ID	<[email protected]>

[Please do not mail me a copy of your followup]

[email protected] (Dennis Boone) spake the secret code
<[email protected]> thusly:

> > For a hardware terminal it is doubtful.  The most they could do is
> > request the contents of the screen be sent to the host or auxiliary
> > port and not every terminal supports sending screen contents back to
> > the host.
>
>Actually, one might be able to program an answerback sequence that e.g.
>contained a hostile command, then triggered the terminal to send said
>command.

Good point, but most real terminals don't have much space for the
answerback message.  In the VT100 it's 20 characters.  In the VT320
it is 30 characters.  Enough to contain a whole command, but not
anything huge.
-- 
"The Direct3D Graphics Pipeline" free book <http://tinyurl.com/d3d-pipeline>
            The Terminals Wiki <http://terminals-wiki.org>
     The Computer Graphics Museum <http://computergraphicsmuseum.org>
  Legalize Adulthood! (my blog) <http://legalizeadulthood.wordpress.com>