From owner-freebsd-security Wed Jul 22 11:15:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA21512 for freebsd-security-outgoing; Wed, 22 Jul 1998 11:15:38 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from lariat.lariat.org (ppp1000.lariat.org@[206.100.185.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA21504 for ; Wed, 22 Jul 1998 11:15:32 -0700 (PDT) (envelope-from brett@lariat.org) Received: (from brett@localhost) by lariat.lariat.org (8.8.8/8.8.8) id MAA07768; Wed, 22 Jul 1998 12:15:08 -0600 (MDT) Message-Id: <199807221815.MAA07768@lariat.lariat.org> X-Sender: brett@mail.lariat.org X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0.1 Date: Wed, 22 Jul 1998 12:15:05 -0600 To: "Matthew N. Dodd" From: Brett Glass Subject: Re: Why is there no info on the QPOPPER hack? Cc: Pat Lynch , security@FreeBSD.ORG In-Reply-To: References: <199807221640.KAA06112@lariat.lariat.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 01:17 PM 7/22/98 -0400, Matthew N. Dodd wrote: >This is clearly the cause of your problem. Your attempts to solve your >administrative problem with a technical solution will only give you a >false sense of security. > >Most people don't let the village idiot watch their horse for them. The person who was left in charge was not the "village idiot" by any means. The server is run and maintained by a group for its own benefit, and each of us has a different area of specialization. UNIX experts are not exactly crawling out of the woodwork, alas. >I wish you'd stop trying to convince yourself that some miracle of modern >technology would have saved you from your break-in No "miracles" here. Just a distribution system for fixes which parallels the one via which the buggy software was installed in the first place. It's easy to do a network install of FreeBSD; it ought to be easy to get automatic fixes for security holes. --Brett Glass To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message