From owner-freebsd-hackers Mon Jun 26 19:11:56 1995 Return-Path: hackers-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id TAA01837 for hackers-outgoing; Mon, 26 Jun 1995 19:11:56 -0700 Received: from whisker.internet-eireann.ie (whisker.internet-eireann.ie [194.9.34.204]) by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id TAA01830 for ; Mon, 26 Jun 1995 19:11:50 -0700 Received: from localhost (localhost [127.0.0.1]) by whisker.internet-eireann.ie (8.6.11/8.6.9) with SMTP id DAA05443 for ; Tue, 27 Jun 1995 03:12:26 +0100 To: hackers@freebsd.org Subject: Pete Cottrell: FreeBSD - Good News and Bad News Date: Tue, 27 Jun 1995 03:12:25 +0100 Message-ID: <5441.804219145@whisker.internet-eireann.ie> From: "Jordan K. Hubbard" Sender: hackers-owner@freebsd.org Precedence: bulk Sigh!! FYI.. ------- Forwarded Message From: pete@cs.UMD.EDU (Pete Cottrell) Message-Id: <199506270110.VAA13354@zippy.cs.UMD.EDU> Subject: FreeBSD - Good News and Bad News Jordan - the good news is that FreeBSD has gotten print in a major newspaper. The bad news is .... well, they got the story a bit wrong. I have pointed out the error of their ways in a posting to a DC-area newsgroup in hopes of getting the correct story out. FYI, the "DigitalFlubs" column each week spotlights some techno-glitch or computer item gone awry. %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% From the June 26th, 1995 "DigitalFlubs" column of the WashTech part of the business section, published in every Monday's Washington Post: A piece of security software widely used on computer networks has a hole in it. The federally funded Computer Emergency Response Team said it has distributed instructions on how to correct the problem in FreeBSD, a program created by a software engineer in the Netherlands. In some circumstances, the hole lets people tapping into a computer see and alter information that should be off-limits to them. FreeBSD is an "enhancement" to S/Key, a program that controls password access to networked computers. S/Key itself does not have the problem. ------- End of Forwarded Message