Re: finger-bombing
Bill Heiser (heiser@acs.bu.edu)
Fri, 14 Oct 1994 07:25:33 -0400 (EDT)
"Nayfield, Rod" <nevets.oau.org!alfred!ucf-cs!mail.IConNet.COM!rnayfield@bea
wrote this:
> isn't there a way that an admin can figure out who is the actual user who
> actually fingered the attacked host? Isn't there some sort of identifying
> daemon that would get the name of the guy that fingered the attacked host?
Well they could use 'ident', but that can't be trusted of course.
I think if you come up with a way of positively identifying the originating
username of a finger (or other tcp/ip request), you'll be both rich and
famous :)
--
These are my opinions and not those of this university.