🚀 go-pugleaf

Paul 'Shag' Walmsley (ccshag@sgi2.phlab.missouri.edu) wrote:
: Zik Saleeba (zik@zikzak.apana.org.au) wrote:
: : davidsen@tmr.com (bill davidsen) writes:

: : >This "security by obscurity" policy is a crock; I've been helping keep
: : >business systems secure for over 25 years, and full disclosure has
: : >always been best, allowing the system administrators to understand and

: : Full disclosure by 8lgm once got my machine broken into in the
: : nighttime hours before I next read c.s.u.. I'd _far_ prefer to have
: : the opportunity to take some defensive action before every weenie was
: : given the ability to crack my system.

: I don't think that it is unusual for the "weenies" to be cracking your 
: system for quite some time before the 8lgm advisory came out.  Simply 
: because system administrators hear about a hole for the first time 
: through 8lgm doesn't mean that others didn't hear about it earlier.

: --

: - Paul "Shag" Walmsley <ccshag@everest.cclabs.missouri.edu>
:   "The only difference between myself and a madman is that I am not mad."
:        - Salvador Dali

Naah Naah Na Naah Naah,
I know a secret,
I'm not going to tell you.
But you'd better worry.
Naah Naah Na Naah Naah!

This is indeed a crock.  Tell us what to look for or don't say anything!  
Those who crack have the time to figure out what your secret is.  Those 
who admin don't.


-- 
gburnore@garys.arasmith.com
--------------------------------------------------------------------------
                How you look depends on where you go.
--------------------------------------------------------------------------
                                     | �۳�ݳ޳�ݳ�۳�ݳ޳�ݳݳ޳�ݳ����
Gary L. Burnore                      | �۳�ݳ޳�ݳ�۳�ݳ޳�ݳݳ޳�ݳ����
Director, Programming & Development  | �۳�ݳ޳�ݳ�۳�ݳ޳�ݳݳ޳�ݳ����
Myers Information Systems, Inc.      | �۳ 3 4 1 4 2 �ݳ޳ 6 9 0 6 9 ���
                                     |     Official Proof of Purchase
==========================================================================