Computer Security Weekly, Sep.17. 2000


By the way, in regard to the new "Streams" virus, you may see reports that seem to indicate Alternate Data Streams are some newly discovered bug in Windows NT. Not true: ADS, although pretty much unused, is a known function. Security aspects have been discussed on the NTBUGTRAQ list.

http://ntbugtraq.ntadvice.com/archives

If you want to experiment with streams, the syntax simply involves a colon a the end of the regular file name, and an additonal specification that looks pretty much like another file name.

For example, any experienced DOS user will recognize what happens with the command: echo "this is the main file" > file1.txt

Try it out with: echo "this is the stream" > file1.txt:stream1.txt

If you try: type file1.txt:stream1.txt edit file1.txt:stream1.txt there will be an error, because not all DOS commands can accommodate streams. However, notepad file1.txt:stream1.txt will work just fine.

Microsoft reference info is available at:

http://support.microsoft.com/support/kb/... http://www.microsoft.com/msj/defaulttop.... http://msdn.microsoft.com/msdn-online/st...

RSA released the patent on the RSA algorithm into the public domain two weeks before they had to. Although the story got a lot of press, it doesn't seem to have resulted in anything.

http://www.eweek.com/a/pcwt0009063/26246... http://www.nwfusion.com/news/2000/0906rs...

Another distributed denial of service (DDoS) tool has been released. Trinity, which can only be run on Linux, joins the rest of the crowd.

http://www.nwfusion.com/news/2000/0906dd...

The US federal government has found out that many of its computer systems are insecure. Surprise, surprise.

http://CNN.com/2000/TECH/computing/09/11...

mailto:rslade@vcn.bc.ca
mailto:rslade@sprint.ca
mailto:robertslade@usa.net
mailto:p1@canada.com Robert Slade's Guide to Computer Viruses, 0-387-94663-2, (800-SPRINGER)
The copyright of the article Computer Security Weekly, Sep.17. 2000 in Computer Security is owned by Robert Slade. Permission to republish Computer Security Weekly, Sep.17. 2000 in print or online must be granted by the author in writing.

Go To Page: 1

Articles in this Topic    Discussions in this Topic