From owner-freebsd-hackers  Sat Mar  3 10:29:50 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from peorth.iteration.net (peorth.iteration.net [208.190.180.178])
	by hub.freebsd.org (Postfix) with ESMTP id D66B737B720
	for <freebsd-hackers@FreeBSD.ORG>; Sat,  3 Mar 2001 10:29:45 -0800 (PST)
	(envelope-from keichii@peorth.iteration.net)
Received: by peorth.iteration.net (Postfix, from userid 1001)
	id 6E97359570; Sat,  3 Mar 2001 12:29:38 -0600 (CST)
Date: Sat, 3 Mar 2001 12:29:38 -0600
From: "Michael C . Wu" <keichii@iteration.net>
To: James Howard <howardjp@well.com>
Cc: Wes Peters <wes@softweyr.com>,
	Alfred Perlstein <bright@wintelcom.net>,
	Dan Phoenix <dphoenix@bravenet.com>, freebsd-hackers@FreeBSD.ORG
Subject: Re: easy way to crash freebsd
Message-ID: <20010303122938.A31278@peorth.iteration.net>
Reply-To: "Michael C . Wu" <keichii@peorth.iteration.net>
Mail-Followup-To: "Michael C . Wu" <keichii@iteration.net>,
	James Howard <howardjp@well.com>, Wes Peters <wes@softweyr.com>,
	Alfred Perlstein <bright@wintelcom.net>,
	Dan Phoenix <dphoenix@bravenet.com>, freebsd-hackers@FreeBSD.ORG
References: <3AA0AE20.653196F8@softweyr.com> <Pine.GSO.4.21.0103031304470.11768-100000@z.glue.umd.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <Pine.GSO.4.21.0103031304470.11768-100000@z.glue.umd.edu>; from howardjp@well.com on Sat, Mar 03, 2001 at 01:05:24PM -0500
X-PGP-Fingerprint: 5025 F691 F943 8128 48A8  5025 77CE 29C5 8FA1 2E20
X-PGP-Key-ID: 0x8FA12E20
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Sat, Mar 03, 2001 at 01:05:24PM -0500, James Howard scribbled:
| On Sat, 3 Mar 2001, Wes Peters wrote:
| 
| > You don't even have to overwrite it some times.  Accessing word-size-only
| > registers in memory a byte at a time can cause a bus error and panic...
| 
| I have never worked with FreeBSD at this low a level.  How does one do
| this and why?  :)

1. You never do this.
2. Wes and Alfred were pointing out the logical errors made
   by a certain user.  When you can modify /etc/resolv.conf 
   at will, you are root.  What point is there when the "malicious"
   "user" (if we can call him just a user at this point)? :)
3. Like Wes and Alfred said, accessing /dev/mem could be fun. 
   
-- 
+------------------------------------------------------------------+
| keichii@peorth.iteration.net         | keichii@bsdconspiracy.net |
| http://peorth.iteration.net/~keichii | Yes, BSD is a conspiracy. |
+------------------------------------------------------------------+

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message