Letters to the editor

Community help as an attack vector

From:		James Dixon <jdixon-AT-pobox.com>
To:		letters-AT-lwn.net
Subject:		Community help as an attack vector
Date:		Sun, 25 Dec 2005 21:09:08 EST

 
I'm afraid the potential may be more real than we would like.
 
I used to respond to questions on the free linux support site before it
died. On at least three occasions, I was asked if I would be willing
to remotely access the machine in question as root and work on it. The
only contact these people had with me was my posts on the forum and my
name given at the end of the posts. In each case, I declined and
pointed out that offering root access to an almost complete stranger
was ot really a good idea. Instead I usually gave the person the
contact addresses for their nearest LUG's and suggested they contact
them to see if they could arrange for onsite support from a qualified
support person.
 
It would be reassuring to think my experience was unique, but I doubt
that's the case.
 
Oh, this is emailed, as I'm not a subscriber. I read you free edition
weekly, but I can't really justify your subscription rates. I'd love
to be able to do so, but barring winning the lottery, I don't see that
it's likely. This is not intended as a criticism of your rates, as I
know that you keep them as low as possible, and that even the current
rates don't really meet your needs.
 
You're welcome to publish this in your letters section, or copy it to
the comments section o fthe appropriate story, as you see fit. You may
edit it as required.
 
James Dixon
jdixon@pobox.com
   

Comments (5 posted)

"Just works with Linux"

From:		"Ian Bruntlett" <ianbruntlett-AT-hotmail.com>
To:		letters-AT-lwn.net
Subject:		"Just works with Linux"
Date:		Thu, 22 Dec 2005 11:26:44 +0000

Hi,

Take a look at "http://kerneltrap.org/node/5743", an article about the Open 
Graphics Project which sets out to have open documentation about its 
hardware (registers etc) so that the FOSS can maintain graphics drivers.

I'm looking forward to supporting this project.


Ian

Comments (3 posted)