Path: utzoo!attcan!uunet!bu.edu!rpi!zaphod.mps.ohio-state.edu!usc!cs.utexas.edu!jbc From: peter@ficc.ferranti.com (peter da silva) Newsgroups: comp.std.unix Subject: Re: Standards Update, IEEE 1003.6: Security Message-ID: <9952@cs.utexas.edu> Date: 10 Jul 90 15:43:41 GMT References: <780@longway.TIC.COM> <786@longway.TIC.COM> <790@longway.TIC.COM> <802@longway.TIC.COM> Sender: jbc@cs.utexas.edu Reply-To: peter@ficc.ferranti.com (Peter da Silva) Organization: Xenix Support, FICC Lines: 22 Approved: jbc@cs.utexas.edu (Guest Moderator, John B. Chambers) From: peter@ficc.ferranti.com (peter da silva) In article <802@longway.TIC.COM> pkr@sgi.com (Phil Ronzone) writes: [had a B1 UNIX box] > But they forgot to tell us what the passwords were. Although we had > physical possesion of the machine, in a company that also make computers, > it would have taken us a while to "boot" the system (i.e., insecurely). And if you needed to use the machine, you would have been out of luck. For some people that level of security has a negative value. It's that simple. It's not like we're saying "we want all UNIX systems to be insecure", we're saying "we don't want all UNIX systems to come with that level of security". Can't you see the difference? -- Peter da Silva. `-_-' +1 713 274 5180. Volume-Number: Volume 20, Number 120