Re: rtm and uucp


Brandon S. Allbery (mailrus!cwjcc!hal!ncoast!allbery@ames.arc.nasa.gov)
20 Nov 88 18:05:57 GMT


As quoted from <13059@princeton.Princeton.EDU> by > by alb@olden.uucp (Adam L. Buchsbaum):
+---------------
| In article <8597@rpp386.Dallas.TX.US> jfh@rpp386.Dallas.TX.US (John F. Haugh II) writes:
| >It would be so nice if someone would undertake a security audit to
| >insure that work other college students did, which *is* currently
| >in production, doesn't contain any surprizes.
|
| Being just an ignorant graduate student myself, I can't figure out
| whether this implies that all college students are suspect, anyone who
| is not in college is not suspect, or both? Perhaps John F. Haugh II
| could clarify this for me?
+---------------

You misunderstand; he's not talking about RTMorris, he's talking about the
kind of peoplke who wrote sendmail, and fingerd, and other programs that
might have inadvertent security holes in them. And we've *all* done it at
one time or another. An independent audit of "important" code is a good
idea.

++Brandon

--
Brandon	S. Allbery, comp.sources.misc moderator	and one	admin of ncoast	PA UN*X
uunet!hal.cwru.edu!ncoast!allbery  <PREFERRED!>	    ncoast!allbery@hal.cwru.edu
allberyb@skybridge.sdi.cwru.edu	      <ALSO>		   allbery@uunet.uu.net
comp.sources.misc is moving off	ncoast -- please do NOT	send submissions direct
      Send comp.sources.misc submissions to comp-sources-misc@<backbone>.



This archive was generated by hypermail 2.0b3 on Thu Mar 09 2000 - 14:44:54 GMT