From: Sam Quigley <poodge@econ.Berkeley.EDU>
Date: Thu, 24 Aug 95 14:46:48 PDT
To: trei@process.com
Subject: Re: SSL CHALLENGE: ALERT! probable misallocation of keys?
In-Reply-To: <9508242051.AA13777@toad.com>
Message-ID: <199508242146.OAA13613@quesnay.Berkeley.EDU>
MIME-Version: 1.0
Content-Type: text/plain


>>>>> "Peter" == Peter Trei <trei@process.com> writes:

    > I've been looking at the allocated list of keys, and I notice a
    > possible problem: One user has allocated 50,000 segements:

    > 0c2b-cf7a NOACK 0c2b 50000 Joe Thomas <jthomas@ogi.com>

    > Now, it's possible this fellow has some vast farm of high-speed
    > workstations, but I doubt it.  Finger suggests that this is a
    > linux box. [...]

Finger reports that it is indeed a linux (1.2.9) box with a low load
average (0.00, 0.00, 0.00 right now), but that Mr. Thomas is on from
nemesis.ogi.com.

nemesis refuses finger, telnet, and ftp connections, but, on WWW
connect, asks for a userid and password for the "Marcam Development
WWW site at nemesis.ogi.com."

Marcam (http://www.marcam.com) makes something to do with computers,
so Mr. Thomas could well have a bunch of computers at his
disposal... (Even so, 50000 is a big number)

I can't actually figure out what, specifically, Marcam makes.  They
produce applications which reduce costs, increase flexibility, and the
whole shebang... but nowhere does it say what the programs *do*...

Smells like an NSA front.

-sq :)