Premier Long Distance Network - A phone company that makes CENTS= !

From owner-kernel-audit@nl.linux.org Sat Feb 3 17:21:41 2001 Received: by humbolt.nl.linux.org id ; Sat, 3 Feb 2001 17:19:12 +0100 Received: from [210.182.45.4] ([210.182.45.4]:30301 "EHLO exoedms.exofresh.co.kr") by humbolt.nl.linux.org with ESMTP id ; Sat, 3 Feb 2001 17:17:55 +0100 Received: from max1-46.losangeles.corecomm.net_[216.214.106.174] (max1-46.losangeles.corecomm.net [216.214.106.174]) by exoedms.exofresh.co.kr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id 1BZWYZXK; Sat, 3 Feb 2001 23:23:25 +0900 Received: from by max1-46.losangeles.corecomm.net with ESMTP; Sat, 03 Feb 2001 06:30:03 -0800 Message-ID: <000057c721b0$00003219$000007f4@> To: From: hk67hk89@yahoo.com Subject: . 2036 Date: Sat, 03 Feb 2001 06:30:03 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Sender: owner-kernel-audit@nl.linux.org Precedence: bulk Return-Path: X-Orcpt: rfc822;kernel-audit-list vLink=3D#0000ff>


		YOU SAVE 20% to 50% ON YOUR PHONE BILL EACH MONTH!
. . . and we'll donate 5% of your monthly phone bill to t= he charity of your choice!
NO Monthly Service Charge! NO Installation Fees! Billed in 6 Second Increments! O= nly 6.9=FFFFFFA2 Per Minute Interstate 24 Hours / 7 Days a Week! SAVE 20% to 50% on Your Phone Bill Each Mon= th! Click here to view and print form <= FONT color=3D#000000 face=3DArial size=3D2>NOTE: After the form loads o= n your screen, simply click the "print" button on your browser, fill out = the form and fax to 1-800-377-2125.
No monthly service charge and no installation fees (s= avings $3.95 - $8.95 per month) Charges 6 second increments, not 60 seconds (savings = on average of 27 seconds billing on every call) Low intrastate rates (saving you money on expensive c= alls within your own state) Rates are the same every day and every hour - 6.9=FF= FFFFA2! (saving you on expensive day rates of up to 25 cents per minute)= Add Toll free "800" service to existing lines or cell= phones at no additional installation charge or monthly fees and = only 6.9=FFFFFFA2 per minute interstate. Calling cards are available (16.5=FFFFFFA2 per minute= , 6-second increment billing) with no NBS surcharges for your calls and no = charge for the card(s). Sound too good to be true? Wel= l, it's not . . . it's true! The bottom line: AT&T, Sprint, MCI/Worldcom bills will be higher when all the charges are= added. You can easily save $100, $200, or more per year on your lo= ng distance bills, depending on your calling habits. Click here to view and print form <= FONT color=3D#000000 face=3DArial size=3D2>NOTE: After the form loads o= n your screen, simply click the "print" button on your browser, fill out = the form and fax to 1-800-377-2125. (Federal regulations requir= e your signature.) 5% of your mont= hly phone bill goes to help and support the following charitable organizations: Make a Wish Foundation St. Judes Children's Hospital The Miracle Network Compassion International or the charity of YOUR choice! Ask for your toll free number(s) on the form. Get a calling card if you wish. Don't wait, just do it today. You'll be glad you did! If you would like to be removed, please email us back with the = word "Remove" in the subject line. We apologize for any inc= onvenience.

<= /HEAD>

Kernel-audit: discussion list for security and the linux kernel Archive: http://mail.nl.linux.org/kernel-audit/ From owner-kernel-audit@nl.linux.org Wed Feb 7 19:24:32 2001 Received: by humbolt.nl.linux.org id ; Wed, 7 Feb 2001 19:23:04 +0100 Received: from terra.geo.uu.nl ([131.211.29.16]:24572 "EHLO terra.geo.uu.nl") by humbolt.nl.linux.org with ESMTP id ; Wed, 7 Feb 2001 19:22:34 +0100 Received: from polaris.net (nexus.polaris.net [199.44.34.2]) by terra.geo.uu.nl (8.9.3/8.9.3/TvZ) with ESMTP id TAA18113 for ; Wed, 7 Feb 2001 19:22:32 +0100 (MET) Received: from localhost by polaris.net (8.9.2/8.7.6) with SMTP id NAA08811 for ; Wed, 7 Feb 2001 13:22:21 -0500 (EST) Date: Wed, 7 Feb 2001 13:22:20 -0500 (EST) From: "E. Ratliff" To: kernel-audit@nl.linux.org Subject: Update and place to start Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-kernel-audit@nl.linux.org Precedence: bulk Return-Path: X-Orcpt: rfc822;kernel-audit-list Hi, The source for 2.4.0 has been put into CVS on sourceforge. It will be updated to 2.4.1 soon. I have run some of the tools against the code and am putting the generated output in the "reports" module in CVS. its4.report is there currently. ITS4 has a database of known vulnerabilities and scans the code for them. It points out risky code, but that doesn't necessarily mean that the code is buggy or vulnerable. Nevertheless, it points out good places to begin auditing, so if you are considering auditing some code and are looking for a good place to start, pick a file that has an area marked "Urgent" or "Very Risky". cccc is also an interesting tool, but I am not sure how much use it will be. (As an aside, it has been running for 18 hours and has not yet completely analyzed the kernel source.) It does output intermediate results, and so far it says that McCabe's Cyclomatic Number is 37470. I found a document that says that anything over 50 is considered extremely risky and untestable, so I tried running cccc against some other source. Of the code that I tested Dan Bernstein's publicfile has the lowest value at 385. Postfix has a value of 6612. Bind is 4427. Bernstein's djbdns is 3029. Interestingly enough, Postfix has more than one comment per line of code, while Bernstein's code has about 50 lines of code per comment. So while it is a fun tool, do you have any insight on how exactly to use this tool to help audit the source? (All of these other runs completed within a few seconds.) I will upload parts of the cccc output when the tool has completed its run. Happy auditing, E. E. Ratliff ratliff@polaris.net Kernel-audit: discussion list for security and the linux kernel Archive: http://mail.nl.linux.org/kernel-audit/