From: Adamsc@io-online.com (Adamsc)
Date: Wed, 4 Dec 1996 22:58:20 -0800 (PST)
To: "ichudov@algebra.com>
Subject: Re: IP address
Message-ID: <19961205065535453.AAA200@rn215.io-online.com>
MIME-Version: 1.0
Content-Type: text/plain


On Mon, 2 Dec 1996 04:38:46 -0600 (CST), Igor Chudov @ home wrote:

>> >What is the risk of publishing your dynamic IP address to a web page while you are on line?  How vulnerable is >> >someone just connected to the internet, w/o any server running? What attacks are feasable? --Internaut

>> Well, if you are running Win95 (all) or 3.1 (w/certain TCP/IP stacks) your
>> machine can be locked up or rebooted at *any* time using just PING!

>Isn't is Unix that is actually vulnerable?

Actually, it anything from Windows systems to Unix boxes to routers to
printers to firewalls, etc can be vulnerable..!

I know that linux got a patch out in 2 hours 35 minutes 10 seconds and that
OS/2 hasn't been vulnerable since 1990 or so, but that's just because I use
those systems.  Check http://www.sophist.demon.co.uk/ping/ for details on
your system.

#  Chris Adams  <adamsc@io-online.com> | http://www.io-online.com/adamsc/adamsc.htp
#  <cadams@acucobol.com>                 | send mail with subject "send PGPKEY"
"That's our advantage at Microsoft; we set the standards and we can change them."
   --- Karen Hargrove, Microsoft (quoted in the Feb 1993 Unix Review editorial)