TIP: Click on subject to list as thread! ANSI
echo: nthelp
to: Geo
from: John Beckett
date: 2005-08-07 15:28:48
subject: Re: monad virus

From: John Beckett 

"Geo"  wrote in message
news::
> "John Beckett" 
wrote in message
> news:kej8f1pekpddf9v8533ikkdb4i9bhrp8v9{at}4ax.com...
>
> > Apparently, the claim is that you can write a monad script that will (for
> > example) find other scripts and replace them with itself (if the current
> > process has write permission).
>
> Considering these are proof of concept, my guess is the claim was that you
> couldn't and this is proof that you can. Sort of like the recent ciscogate
> thing where for years cisco has claimed that you couldn't execute code on
> IOS via a remote exploit.

Uh oh - you may not have thought about what you're arguing!

It is obvious that any decent scripting or programming language can produce
a program that can do malicious things. It is pretty trivial to write a
script that finds other scripts and changes their contents.

Cisco really does have a problem. By contrast, there is no vulnerability in
Monad, other than the obvious fact that if you run a script it can do bad
things.

John

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270 5030/786
@PATH: 379/45 1 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.