Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 May 1996 19:28:57 -0700
From:      "Jordan K. Hubbard" <jkh@time.cdrom.com>
To:        kduling@natasha.scccc.com (Kevin J. Duling)
Cc:        owner-freebsd-security@freefall.freebsd.org (Glen Foster), coredump@nervosa.com, freebsd-security@freebsd.org
Subject:   Re: very bad 
Message-ID:  <8769.832386537@time.cdrom.com>
In-Reply-To: Your message of "Fri, 17 May 1996 10:16:36 MDT." <199605171616.KAA15759@natasha.scccc.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> If you don't announce the bugs, then the crackers learn them while the
> admins are left in ignorance.  You're not going to find a forum where
> you know you're only telling "the right people" about the problem.

I don't disagree in principle, but I still think that a slavish
adherance to either a "don't tell anything" or "tell everyone"
philosophy is a mistake, and each situation should be handled on a
case by case basis.  In some cases you're informing the populace of a
very important piece of information and in others you're simply
handling the baby a blasting cap to play with.

					Jordan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8769.832386537>