Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 May 1996 10:16:36 -0600 (MDT)
From:      kduling@natasha.scccc.com (Kevin J. Duling)
To:        owner-freebsd-security@freefall.freebsd.org (Glen Foster)
Cc:        jkh@time.cdrom.com, coredump@nervosa.com, freebsd-security@freebsd.org
Subject:   Re: very bad
Message-ID:  <199605171616.KAA15759@natasha.scccc.com>
In-Reply-To: <199605171100.HAA00301@ptavv.nsta.org> from "Glen Foster" at May 17, 96 07:00:35 am

next in thread | previous in thread | raw e-mail | index | archive | help
> I, for one, am very happy that he announced it to the group rather
> than attempting STO.  I was able fix the systems for which I have
> responsibility immediately.  Thanks to Chris for getting the word out!
> ---
> Glen Foster <gfoster@gfoster.com>

I agree.  I once had a talk with Chris McDonald from WSMR about system
security and the debate about whether or not to protect your system through
ignorance or not.  I was a student at NMSU at the time, working on a paper
for system security on NMSU-NET.  My audience was my instructor who was
also my manager at the Computer Center.  Wow, did that stir up a hornets
nest, but that's another story...

If you don't announce the bugs, then the crackers learn them while the
admins are left in ignorance.  You're not going to find a forum where
you know you're only telling "the right people" about the problem.

Now I'm wondering about how many others are out there that I don't know
about because they weren't posted on the lists I read.

Who's Chris McDonald?  One of the few people who listened to Cliff Stoll.

-- 
Kevin J. Duling               /\/^\^/^\^\/\           SCC Communications Corp.
kduling@scc911.com          Boulder, Colorado         (303) 581-5769



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199605171616.KAA15759>