Re: Sun M-class hardware denial of service

On Sun, Sep 28, 2008 at 08:14:16AM -0600, Theo de Raadt wrote:

the only workaround is to buy a seperate machine for the other uses.


No.

So you buy a machine that can be split up into different machines, and
guess what, you still have to buy extra ones because it doesn't
work.


Unless you misstated the exploit vector in your original message then
locking untrusted people into a zone will work. I can't help it if
you don't understand the implications of doing this.

Apparently you just plain can't understand simple english.

If you put someone running OpenBSD into a zone, and that zone locks up
completely and cannot be reset because of a flaw Sun has now admitted,
then if you NEED that zone back, you have to power the machine down.

If you don't understand that, you must be really really stupid.

Trust?

You want to talk about trust? The entire idea is that you could
TRUST the zones to do their job.


Relevant Pages

  • Re: Very Critical issue
    ... Since that you're able to recreate the trust that means that the DC that was used to create the trust is able to communicate and validate the trust. ... are the clients using that same DC/DNS or are they querying a different DC/DNS that may has issues in their DNS secondary Zone? ... was at that time that the clients started with issues when trying to access to the other servers in the other forest? ...
    (microsoft.public.windows.server.active_directory)
  • DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (NT-Bugtraq)
  • Re: One Way Trust
    ... The secondary forward look up zone has been created on ... production domain has several domain controllers and I ... a outgoing one way external trust. ...
    (microsoft.public.windows.server.active_directory)
  • DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (Bugtraq)
  • [Full-Disclosure] DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (Full-Disclosure)