Re: exploit in linux kernel

On 26 Oct 2002, Ken Dyke wrote:

> > It looks like you might be guilty if you follow the wrong links
> > at: http://thefreeworld.net/
> >
> > But not to worry: I am sure the US would never require foreign
> > nationals to remain in the US without a work permit waiting months
> > for a trial, or tell that they would be able to speak in their own
> > defence in a hearing in the US, but deny them an entry visa.
>
> Richard, the above paragraph could use <irony></irony> tags.
>
> Slashdot ran a story about this about a week ago.  Someone posted the
> details in the discussion section.  If the material at thefreeworld.net
> is a violation of DMCA then most issues of Phrack are capitol offenses.
> :-(

re: material at thefreeworld.net... It is a violation of the DMCA, because
(like another poster said) it's a circumvention of a security feature of
the kernel and by way of it's discovery was in violation of the DMCA.
(what did you _think_ the reason was that posts to Bugtraq containing
literally dried up of juicy details overnight).  This is one of the things
a great many of us poor bastards doing IT security professionally were
very unhappy with, since the recess times suffered by those of us who pay
attention to full disclosure lists is practically nothing compared to
people who merely wait for their vendors to patch something.

re: Phrack.  Not really.  They've been pretty nimble about avoiding that.
The few articles that actually touch upon specific deployments of things
that could be construed as a violation are written by people who wisely
keep themselves anonymous.

What's more disturbing is how rarely you get to hear details of the latest
gaping Microsoft hole really fleshed out--we practically only get to know
they're there and try and guess how to cover them over until MS comes up
with a patch (compared to pre-DMCA days).

> I was at an awards dinner a week ago.  Sen. Burns was there.  He was
> being clued in on how the FCC and things like the DMCA stand in the way
> of innovation.

I pray he takes those clues to heart.

> The real point to this maneuver is to instigate public discourse.  It is
> only the bright light of public discourse that will expose the shady
> dealings between Congress and the PowerElite.

You betcha.

-- 
Unsubscribe: send email to [email protected]
and put 'unsubscribe lfs-security' in the subject header of the message