🚀 go-pugleaf

gad@eclipse.its.rpi.edu (Garance A. Drosehn) writes:

>jgg@proforma.com (J. G. Gregory) writes:
>> 2. Open Preferences.  To the right, click on the UNIX certificate icon.
>>    Under "Security Options" turn on "Public Window Server".  This is a
>>    security weakness, and I don't understand how severe.  However, I am
>>    a standalone site,  [...etc...]

>For people who are not a standalone site (ie, if your NeXT is on the  
>internet), this is a significant security hazard.  In my own opinion, it is  
>not a good idea to do if your NeXT is on the internet.  It is no problem to  
>do if your host is standalone, as JG's is.

To further emphasize why this is a hazard - when you have Public
Window Server turned on, anyone who has an internet connection to your
machine can perform tasks on your machine with the same security
equivalence as the person who is currently logged into the console
of the machine. (without a whole lot of trouble)
-- 
David Lemson                                                (217) 244-1205
University of Illinois NeXT Campus Consultant / CCSO NeXT Lab System Admin
Internet : lemson@uiuc.edu                UUCP :...!uiucuxc!uiucux1!lemson 
NeXTMail accepted                                  BITNET : LEMSON@UIUCVMD