BEE-L Archives

Informed Discussion of Beekeeping Issues and Bee Biology

BEE-L@COMMUNITY.LSOFT.COM

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Michael Moroney <[log in to unmask]>
Reply To:
Discussion of Bee Biology <[log in to unmask]>
Date:
Fri, 26 May 1995 00:22:34 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (24 lines)
> >        Your access provider is an idiot then...think about it, what's to
> >stop me from changing the subject heading from "Good Times" to "Free Bee
> >Supplies"? Or is the whole virus program dependant on the subject heading
> >to trigger the virus in an ASCII file? And how can you execute and ASCII
> >file anyway? 8-}
> >
> It is (or was) possible to triger an action just by displaying an ASCII file!
> If you were using an ANSI (aka VT100) terminal AND your mail reader did not
> intercept escape sequences AND you were running a common shell or command
> interpreter... then a devious message could do just about anything it wanted.
 
No there is no way to have a devious mail message execute commands as you imply
on a VT100.  DEC was smart enough to leave the possibility out. I suppose it
may be possible that some terminal programs, VT100 clones or other ANSI
terminals may have added something.  About the closest you could do with a
VT100 is getting the terminal to send the answerback buffer but there's no way
to load that remotely, you just got whatever the owner manually entered
(if anything).
 
You could, however, get a (real) VT100 in pretty strange states by certain
escape sequences but nothing that could trigger action.
 
-Mike

ATOM RSS1 RSS2