Dan Lynch (LYNCH@A.ISI.EDU)
3 Apr 1987 21:18:43 EST
John, I think you did a good thing. Testing for idiotic holes in
the "system". Now, if you could figure out a way to encourage
them to get plugged. I remember years ago being annoyed at the
loose security in the Tenex operating system that was prevalent
on the early Arpanet. I couldn't get the wizards at BBN to "fix"
the problems by the "usual" means. So, one day I took advantage of
the holes and, across the net, all by myself with no confederates,
obtained the password of the wizard of all wizards and sent it to him
in a one word mail message. No other communication was necessary.
He plugged the holes as fast as his fingers could type. I was a "good
guy" and he knew it, but it took an actual event to drive the point home
it wouldn't be too long before someone else would figure out the
method i used an dperhaps not be so benign.
Can you think of a similar thing to do? Or have you already done it?
(I think not because what you are pointing out is going to take
lots of thinking to solve. But, it has to start somewhere.
This archive was generated by hypermail 2.0b3 on Thu Mar 09 2000 - 14:37:47 GMT