🚀 go-pugleaf

pwh@bradley.bradley.edu (Pete Hartman) writes:

[ ... ]

> I don't want to be kept in the dark with bullshit like "exploit scripts
> withheld until a patch is available".  I'm sad to see 8lgm reduced to
> nearly worthless information now.  I have 4 or 5 advisories from them
> recently that seem important, but I have no way to verify and no time
> to spend digging them up myself, so we're probably going to end up
> vulnerable until someone who *isn't* just a wannaby and doesn't rely on
> such obscurity riddled methods of communication comes along and kicks us
> over.  That's even more of a waste of my time than being told in advance
> what the problem is and usually being able to patch it up before the
> wannabes get very far with it.

Wasn't one of the results of the lengthy debates on this topic to
send the alert with a temporary fix first, and the explanation
and exploit script later, when admins had a chance to apply the
fix?
In our concern's Notes conferences a merry colleague from the US
just discovered alt.2600 and the like and posts it happily around
the world ... (I can't flame her because I have no write permission
in that conference)

Cheerio
	Volkmar
-- 
vg@ranahh.hanse.DE
Volkmar Grote, Gilbertstrasse 25, D-22767 Hamburg, Germany, +49-40-31 33 39

"I want to die peacefully in my sleep like my grandfather.  Not screaming
in terror like his passengers." (nicked from Jim Harkins)