Back to the main page

Mailing List Logs for ShadowRN

Message no. 1
From: Gurth <gurth@******.NL>
Subject: Altering security tallies (was Re: Weird Campaigns)
Date: Fri, 22 May 1998 11:36:28 +0100
Ereskanti said on 8:18/21 May 98...

> Dump Log action reduces things, but it takes time. I know we've got a
> program/form that reduces a given security tally, but the program is Net
> Success based and the decker has to have an idea how intensive the Tally is
> currently (such as after performing an Analyze Host).

Analyze Security tells you your security tally :) Yes, I agree you'd have
to find out your current ST before you can search for it. If you don't,
you should probably be able to find the file (or whatever) that holds the
tallies, but all you can do is change all of them at once, or pick one at
random and change that.

> > However, I think there'd be some protection built into the system, for
> > example that only supervisor-level users can alter security tallies. Any
> > thoughts?
>
> Agree here, you'd probably have larger than normal target numbers for
> performing such, and it would NOT be possible at without the Masking
> Attribute (so no using a legit deck/terminal for this stunt).

Why? Legitimate users don't build up security tallies, and how are you
going to check if the decker attempting to modify the ST has Masking in
the deck? Plus it would mean the real sysadmin needs a deck with Masking
in it to do something that looks to me like normal system maintenance...

--
Gurth@******.nl - http://www.xs4all.nl/~gurth/index.html - UIN5044116
"You haven't given me a headache. I like you."
-> NERPS Project Leader * ShadowRN GridSec * Unofficial Shadowrun Guru <-
-> The Plastic Warriors Page: http://www.xs4all.nl/~gurth/plastic.html <-
-> The New Character Mortuary: http://www.electricferret.com/mortuary/ <-

-----BEGIN GEEK CODE BLOCK-----
Version 3.1:
GAT/! d-(dpu) s:- !a>? C+(++)@ U P L E? W(++) N o? K- w+ O V? PS+ PE
Y PGP- t(+) 5++ X++ R+++>$ tv+(++) b++@ DI? D+ G(++) e h! !r(---) y?
------END GEEK CODE BLOCK------
Message no. 2
From: Ereskanti <Ereskanti@***.COM>
Subject: Re: Altering security tallies (was Re: Weird Campaigns)
Date: Sun, 24 May 1998 01:58:09 EDT
In a message dated 5/23/98 8:21:27 PM US Eastern Standard Time,
gurth@******.NL writes:

> Why? Legitimate users don't build up security tallies, and how are you
> going to check if the decker attempting to modify the ST has Masking in
> the deck? Plus it would mean the real sysadmin needs a deck with Masking
> in it to do something that looks to me like normal system maintenance...
>
No it doesn't, it means that a person who consistently uses clearance codes of
one level to attempt to hack into another level they aren't cleared for rings
up a "stupid user tally" (sorry, had to put it that way) that would likely
ring up activities all over the place.

The Real Sysadmin wouldn't need Masking -EXCEPT- for the fact that they (the
all Omnipotent -THEY- mind you) want to keep an eye on all their users without
them knowing about it. Also, if the Sysadmin is possibly going to be dealing
with "outside intrusions", then yes they are going to want to have, or even
-need- to have, weapons of equal power to those coming in at them.

-K

Further Reading

If you enjoyed reading about Altering security tallies (was Re: Weird Campaigns), you may also be interested in:

Disclaimer

These messages were posted a long time ago on a mailing list far, far away. The copyright to their contents probably lies with the original authors of the individual messages, but since they were published in an electronic forum that anyone could subscribe to, and the logs were available to subscribers and most likely non-subscribers as well, it's felt that re-publishing them here is a kind of public service.