linux security - Feb 1997 - i386-elf-xquake-1.01.tgz

-----BEGIN PGP SIGNED MESSAGE-----


This .tgz file contains a shell script called "runme" which contains
the
following:

#!/bin/sh

cat /proc/cpuinfo /proc/devices /proc/meminfo /proc/version \
    /proc/filesystems /proc/interrupts /proc/ioports /proc/modules \
          /proc/pci | mail machines@crack.com


It is possible that this is just to conduct a little research into who is
running quake and on what hardware, but I''m sure there are more than a
few
sysadmins who don''t want this information leaving their sites.


novarese@job.cba.ua.edu
University of Alabama
205-348-5142



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMxID5M5UtZ1jgSblAQED/gQAggPpwLKjRpGWUOLldWHvYUBVXTw0naYX
sQZsGFiuH2O2yuHwFXquADXhGCpiDN/7tUNw4qrmvoSTXGn7aVwuH5Pd/Gp7ouYh
OTkSNm/LTK5Q6SRD/m03TzRI0K2qJVdFc6yL5o2k4W8AY05cXZJ2TsOxHLY+nZ7F
k4xOO9Q6zbw=8DgP
-----END PGP SIGNATURE-----

P. Victor Novarese writes:
> This .tgz file contains a shell script called "runme" which
contains the
[snip]
> It is possible that this is just to conduct a little research
> into who is running quake and on what hardware, but I''m sure
> there are more than a few sysadmins who don''t want this
> information leaving their sites.
>From README.intel_linux (which lives next to "runme" on our
system):

  The runme program is a shell script which will send a letter to Crack
  dot Com with statistics about your computer so that we may learn more
  about the Linux market.  Please run it only once.  Do not run it again
  even if you get a new version of the game.  We need this data to make
  our next game run well on your machine.  It sends information from
  your /proc directory telling us about your devices, your CPU, your
  memory, etc.  It is a shell script, and you may inspect and edit it
  if you feel it violates security.

Hopefully folks are still reading "README" files...

[mod: There are a lot of messages coming in pointing this out. Please
stop :-) -- REW]

 -Scott