Path: utzoo!attcan!uunet!samsung!xylogics!loverso
From: loverso@Xylogics.COM (John Robert LoVerso)
Newsgroups: news.software.nntp
Subject: Re: nntpxfer
Message-ID: <8882@xenna.Xylogics.COM>
Date: 13 Apr 90 14:35:06 GMT
References: <1990Apr1.223737.11095@mlb.semi.harris.com> <G&L$Z=$@b-tech.uucp> <8876@xenna.Xylogics.COM> <90.103.14:40:18@smurf.sub.org>
Reply-To: loverso@Xylogics.COM (John Robert LoVerso)
Organization: Xylogics, Inc., Burlington MA
Lines: 6

I should have been clearer...  NEWNEWS has a security hole in that it
can advertise message-ids of articles that the other end is restricted from
getting via the access file.  LIST does the same thing.  They should both
filter their output based upon restricted groups.

John