"Christopher D. Clausen" <[EMAIL PROTECTED]> writes:

>> If you use the file ownership, not the name, to identify the student
>> then I don't see any chance for impersonation.
>
> Actually, I was just thinking about this...
>
> Couldn't a student handin their own homework and then create a huge 
> number of random files to fill up all available directory entry slots, 
> thus breaking the handin app for subsequent handin attempts?  It would 
> be obvious who this student was, but it could still be an annoyance.

This attack also already exists in the current implementation so it's
no worse in the new model than the existing model.

> <<CDC 

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       [EMAIL PROTECTED]                        PGP key available
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to