Article View: comp.security.unix
Article #57Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
From: Paul 'Shag' Walmsley
Date: Tue, 29 Nov 1994 23:37
Date: Tue, 29 Nov 1994 23:37
22 lines
2288 bytes
2288 bytes
Zik Saleeba (zik@zikzak.apana.org.au) wrote:
: davidsen@tmr.com (bill davidsen) writes:
: >This "security by obscurity" policy is a crock; I've been helping keep
: >business systems secure for over 25 years, and full disclosure has
: >always been best, allowing the system administrators to understand and
: Full disclosure by 8lgm once got my machine broken into in the
: nighttime hours before I next read c.s.u.. I'd _far_ prefer to have
: the opportunity to take some defensive action before every weenie was
: given the ability to crack my system.
I don't think that it is unusual for the "weenies" to be cracking your
system for quite some time before the 8lgm advisory came out. Simply
because system administrators hear about a hole for the first time
through 8lgm doesn't mean that others didn't hear about it earlier.
--
- Paul "Shag" Walmsley <ccshag@everest.cclabs.missouri.edu>
"The only difference between myself and a madman is that I am not mad."
- Salvador Dali
Technical Details
Message-ID:
<3bge0d$p7p@golf.ustores.missouri.edu>Path:
arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!vixen.cso.uiuc.edu!uwm.edu!news.alpha.net!news.mathworks.com!zombie.ncsc.mil!golf!sgi2!ccshagReferences:
<8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU> <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com> <3bg70j$78h@zikzak.apana.org.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10952f,baa596e4a440876b X-Google-Attributes: gid10952f,public X-Google-Thread: 12c8b4,baa596e4a440876b X-Google-Attributes: gid12c8b4,public X-Google-Thread: 1122ea,baa596e4a440876b X-Google-Attributes: gid1122ea,public X-Google-Thread: 134180,baa596e4a440876b X-Google-Attributes: gid134180,public X-Google-ArrivalTime: 1994-11-29 17:35:42 PST Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!vixen.cso.uiuc.edu!uwm.edu!news.alpha.net!news.mathworks.com!zombie.ncsc.mil!golf!sgi2!ccshag From: ccshag@sgi2.phlab.missouri.edu (Paul 'Shag' Walmsley) Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994 Followup-To: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine Date: 29 Nov 1994 23:37:49 GMT Organization: University of Missouri - Columbia Lines: 22 Message-ID: <3bge0d$p7p@golf.ustores.missouri.edu> References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <3bbrjo$ot@cat.cis.Brown.EDU> <3bca3q$6dh@eldborg.rhi.hi.is> <3bdgml$ana@usenety1.news.prodigy.com> <3bg70j$78h@zikzak.apana.org.au> NNTP-Posting-Host: sgi2.phlab.missouri.edu X-Newsreader: TIN [version 1.2 PL2]