🚀 go-pugleaf

a74k110@titan.ucc.umass.edu (Chris Lloyd) writes:

>In article <1259@eplunix.UUCP> raoul@eplunix.UUCP (Nico Garcia) writes:
>>In article <BssuF5.G4@ibmpcug.co.uk>, gtoal@ibmpcug.co.uk (Graham Toal) writes:
>>> Has anyone heard a rumour circulating that some crackers have found a
>>> trapdoor password that lets people on to Next machines with root
>>> privs?  I told the person I heard it from that it sounded like total
>>

>As with any computer, the NeXT has it's share of security holes, you're kidding
>yourself if you think you most computers are secure out of the box.

And there have been CERT advisories that have cleaned up the most
blatant holes, such as the rexd hole (the 'hole' is that NeXT
shipped OS 2.x machines with rexd enabled...their rexd isn't any less
secure than anyone else's), and the rdist hole (that hit 99% of
every BSD 4.2 or 4.3 derived system).  
NeXTs come with a manual (paper and on-line) that describes security
and how to make your machine more secure.  

-- 
David Lemson                                                 (217) 244-1205
University of Illinois NeXT Campus Consultant  / CCSO NeXT Lab System Admin
Internet : lemson@uiuc.edu                 UUCP :...!uiucuxc!uiucux1!lemson 
NeXTMail accepted                                   BITNET : LEMSON@UIUCVMD