🚀 go-pugleaf

jona@iscp.Bellcore.COM (Jon Alperin) writes:
> I still believe that "logging in to a users account and sending them
> mail from their own account" is not the proper way to inform someone of a
> security hole. This is akin to removing all files on a system to show someone
> that all files can be removed. 

  While no one here (that I know of) has "broken in" to an account to
show that it can be done (well, actually, I can think of ONE
exception!), generally, when people go away and leave themselves
logged in, the person who uses the workstation next will send them
mail, as well as copying to local bboard or two - so everyone knows!
The worst cases (thinks bordering on libel or slander, I would
imagine) are tracked down fairly easily.


----------------------------------|++++++++++++++++++++++++++++++++++++++++
| "He divines remedies against injuries;   | "Words are drugs."           |
|  he knows how to turn serious accidents  |     -Antero Alli             |
|  to his own advantage; whatever does not |                              |
|  kill him makes him stronger."           | "Culture is for bacteria."   |
|                   - Friedrich Nietzsche  |     - Christopher Hyatt      |
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-