From owner-freebsd-hackers  Mon May  1 02:27:21 1995
Return-Path: hackers-owner
Received: (from majordom@localhost)
          by freefall.cdrom.com (8.6.10/8.6.6) id CAA19257
          for hackers-outgoing; Mon, 1 May 1995 02:27:21 -0700
Received: from sequent.kiae.su (sequent.kiae.su [144.206.136.6])
          by freefall.cdrom.com (8.6.10/8.6.6) with SMTP id CAA19251
          for <hackers@FreeBSD.org>; Mon, 1 May 1995 02:27:16 -0700
Received: by sequent.kiae.su id AA03007
  (5.65.kiae-2 ); Mon, 1 May 1995 13:26:25 +0400
Received: by sequent.KIAE.su (UUMAIL/2.0); Mon,  1 May 95 13:26:24 +0400
Received: (from ache@localhost) by astral.msk.su (8.6.8/8.6.6) id NAA00521; Mon, 1 May 1995 13:18:16 +0400
To: Julian Elischer <julian@ref.tfs.com>, Terry Lambert <terry@cs.weber.edu>
Cc: hackers@FreeBSD.org, pritc003@maroon.tc.umn.edu, sos@login.dknet.dk
References: <199505010014.RAA00443@ref.tfs.com>
In-Reply-To: <199505010014.RAA00443@ref.tfs.com>;
    from Julian Elischer at Sun, 30 Apr 1995 17:14:15 -0700 (PDT)
Message-Id: <oMNTAfliU1@astral.msk.su>
Organization: Olahm Ha-Yetzirah
Date: Mon,  1 May 1995 13:18:15 +0400
X-Mailer: Mail/@ [v2.32 FreeBSD]
From: "Andrey A. Chernov, Black Mage" <ache@astral.msk.su>
X-Class: Fast
Subject: Re: Screen print capability
Lines: 26
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Length: 842
Sender: hackers-owner@FreeBSD.org
Precedence: bulk

In message <199505010014.RAA00443@ref.tfs.com> Julian Elischer writes:

>> 
>> No, what the console can do is take an escape sequence and as a result,
>> report the screen contents as if they were being typed at the
>> keyboard, spacing, color, and all.

>This is REALLY DANGEROUSE!!!!!!!

>consider:
>mail root <<DONE
>x
>rm -rf /&
>[sequence to make screen send contents from keyboard]

>DONE

It is well known backdoor and it is MUA itself problem (MUA need
to be fixed).
All other stuff (wall,write,talk) already care about it using isprint().

-- 
Andrey A. Chernov        : And I rest so composedly,  /Now, in my bed,
ache@astral.msk.su       : That any beholder  /Might fancy me dead -
FidoNet: 2:5020/230.3    : Might start at beholding me,  /Thinking me dead.
RELCOM Team,FreeBSD Team :         E.A.Poe         From "For Annie" 1849