Date: Tue, 02 Feb 1999 20:59:04 -0800 From: "Jordan K. Hubbard" <jkh@zippy.cdrom.com> To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> Cc: Matthew Dillon <dillon@apollo.backplane.com>, "Jonathan M. Bresler" <jmb@FreeBSD.ORG>, woodford@cc181716-a.hwrd1.md.home.com, security@FreeBSD.ORG Subject: Re: tcpdump Message-ID: <10089.918017944@zippy.cdrom.com> In-Reply-To: Your message of "Tue, 02 Feb 1999 23:46:47 EST." <199902030446.XAA23158@khavrinen.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
> It still appears to be beyond the pale of the script kiddies to > rewrite an Ethernet driver in order to enable it to hand off packets > to BPF. Hopefully it will stay that way for a little while longer. Ummmm. Let me just note for the record that the skill of the script kiddies is essentially irrelevant here since their defining attribute is to use scripts that others have written. All it will take is one semi-intelligent cracker type to write a exploit and associated LKD module, then the rest will just run it blindly or whenever they've gained root by other means. - Jordan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?10089.918017944>