INFO-VAX Fri, 22 Aug 2008 Volume 2008 : Issue 458 Contents: Re: DEFCON 16 and Hacking OpenVMS Re: DEFCON 16 and Hacking OpenVMS Re: LTO3/LTO4 support from OpenVMS 7.2 / ALPHA Maklee Re: SMGRTL patch available on ITRC ftp site Re: SMGRTL patch available on ITRC ftp site Re: SMGRTL patch available on ITRC ftp site Re: SMGRTL patch available on ITRC ftp site ---------------------------------------------------------------------- Date: Thu, 21 Aug 2008 16:41:37 -0700 (PDT) From: Neil Rieck Subject: Re: DEFCON 16 and Hacking OpenVMS Message-ID: <6f1e8270-77f4-4751-933e-8fea364db716@e53g2000hsa.googlegroups.com> So rather than read all 360 messages in this thread, can somebody answer the following question: Did anyone at DEFCON16 cause anything more than a stack dump? Was anyone able to inject a useful new PC address then hijack a VMS system? Neil Rieck Kitchener/Waterloo/Cambridge, Ontario, Canada. http://www3.sympatico.ca/n.rieck/links/cool_openvms.html http://www3.sympatico.ca/n.rieck/links/openvms_demos.html ------------------------------ Date: Fri, 22 Aug 2008 00:23:04 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: DEFCON 16 and Hacking OpenVMS Message-ID: <00A7E754.2E08253C@SendSpamHere.ORG> In article <6f1e8270-77f4-4751-933e-8fea364db716@e53g2000hsa.googlegroups.com>, Neil Rieck writes: >So rather than read all 360 messages in this thread, can somebody >answer the following question: Did anyone at DEFCON16 cause anything >more than a stack dump? Was anyone able to inject a useful new PC >address then hijack a VMS system? YES! It's very real and several here, including myself, have coded our own proof of concept hacks. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM ... pejorative statements of opinion are entitled to constitutional protection no matter how extreme, vituperous, or vigorously expressed they may be. (NJSC) Copr. 2008 Brian Schenkenberger. Publication of _this_ usenet article outside of usenet _must_ include its contents in its entirety including this copyright notice, disclaimer and quotations. ------------------------------ Date: Thu, 21 Aug 2008 21:36:21 -0500 From: David J Dachtera Subject: Re: LTO3/LTO4 support from OpenVMS 7.2 / ALPHA Message-ID: <48AE2625.BDE826CC@spam.comcast.net> Enrike wrote: > > I want some information about if OpenVMS 7.2 running in Alpha platform > (ES47) supports a LTO3 or LTO4 tape unit > > Thanks in advance V7.2 is kind of old, but should see and talk to the drive just fine. It just won't understand things like /DENSITY=LTO3. D.J.D. ------------------------------ Date: Thu, 21 Aug 2008 21:30:00 +0300 From: "Guy Peleg" Subject: Maklee Message-ID: <21712$48adb427$11567@news.teranews.com> Maklee engineering is looking to expand its technical staff. We are looking for highly experienced professionals with experience in the areas of OpenVMS, Tru64, HP-UX and Oracle. If you are interested, please contact me offline (first_nameDOTlastname@maklee.com) for further details. Regards, Guy Peleg President Maklee Engineering www.maklee.com ** Posted from http://www.teranews.com ** ------------------------------ Date: Thu, 21 Aug 2008 14:20:39 -0400 From: "Richard B. Gilbert" Subject: Re: SMGRTL patch available on ITRC ftp site Message-ID: VAXman- @SendSpamHere.ORG wrote: > In article <281609df-9bd2-4306-b272-17cd337a617b@l64g2000hse.googlegroups.com>, IanMiller writes: >> On Aug 21, 2:58=A0am, B...@rabbit.turquoisewitch.com (Brad Hamilton) >> wrote: >>> Subject says it all. =A0I'm off... >> >> Note there is a small issue with the recently released SMGRTL patch >> kits. The special installation instructions in the release notes are >> incorrect >> >> E.g in VMS732_SMGRTL-V0100.RELEASE_NOTES section 7.5 >> >> INSTALL REPLACE SYS$SHARE:SMGRTL.EXE >> ^^^ >> Should be >> >> INSTALL REPLACE SYS$SHARE:SMGSHR.EXE >> ^^^ >> (this applies if you have multiple nodes booting from one system disk. >> You install the kit on one node and do the above INSTALL command on >> the other nodes). > > Excuse me failing eyes but these look to be the same to me. > Time to see your optometrist! Look for "^^^" above. ------------------------------ Date: Fri, 22 Aug 2008 01:18:12 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: SMGRTL patch available on ITRC ftp site Message-ID: <00A7E75B.E1A3D903@SendSpamHere.ORG> FWIW, reading the patch description text (Yes, with my specs on), there is nothing to indicate the severity of or need for applying this patch! I'd wager that there are sites that will NEVER install this patch unless they see some buffer overflow in SMG. Unless this patch is listed as a SECURITY patch, people not following what has been going on here for the better part of a week will not install it. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM ... pejorative statements of opinion are entitled to constitutional protection no matter how extreme, vituperous, or vigorously expressed they may be. (NJSC) Copr. 2008 Brian Schenkenberger. Publication of _this_ usenet article outside of usenet _must_ include its contents in its entirety including this copyright notice, disclaimer and quotations. ------------------------------ Date: Thu, 21 Aug 2008 20:31:21 -0500 From: BRAD@rabbit.turquoisewitch.com (Brad Hamilton) Subject: Re: SMGRTL patch available on ITRC ftp site Message-ID: In article <00A7E75B.E1A3D903@SendSpamHere.ORG>, VAXman- @SendSpamHere.ORG wrote: >FWIW, reading the patch description text (Yes, with my specs on), there >is nothing to indicate the severity of or need for applying this patch! >I'd wager that there are sites that will NEVER install this patch unless >they see some buffer overflow in SMG. Unless this patch is listed as a >SECURITY patch, people not following what has been going on here for the >better part of a week will not install it. > C'mon - you *know* that everyone reads everything on good ol' complain.on.vms.! [...] ------------------------------ Date: Thu, 21 Aug 2008 18:53:44 -0700 (PDT) From: FrankS Subject: Re: SMGRTL patch available on ITRC ftp site Message-ID: On Aug 21, 9:18=A0pm, VAXman- @SendSpamHere.ORG wrote: > FWIW, reading the patch description text (Yes, with my specs on), there > is nothing to indicate the severity of or need for applying this patch! 2 KIT DESCRIPTION: 2.1 Installation Rating: INSTALL_1 : To be installed by all customers. This installation rating, based upon current CLD information, is provided to serve as a guide to which customers should apply this remedial kit. (Reference attached Disclaimer of Warranty and Limitation of Liability Statement) ------------------------------ End of INFO-VAX 2008.458 ************************