Xref: utzoo comp.unix.wizards:25338 alt.security:2406 Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!mp.cs.niu.edu!rickert From: rickert@mp.cs.niu.edu (Neil Rickert) Newsgroups: comp.unix.wizards,alt.security Subject: Re: BSD tty security, part 4: What You Can Look Forward To Message-ID: <1991May2.181145.8135@mp.cs.niu.edu> Date: 2 May 91 18:11:45 GMT References: <721@seqp4.UUCP> <11974: May214:00:3691@kramden.acf.nyu.edu> <83658694@bfmny0.BFM.COM> Organization: Northern Illinois University Lines: 31 In article <83658694@bfmny0.BFM.COM> tneff@bfmny0.BFM.COM (Tom Neff) writes: >In article <11974:May214:00:3691@kramden.acf.nyu.edu> brnstnd@kramden.acf.nyu.edu (Dan Bernstein) writes: >> I again invite you and everyone else to stop >>spouting the same tired old rhetoric and start paying attention to this >>case on its own merits. > >I suggest this invitation would not have been needed if 'brnstnd' had >been somewhat more professional in his original announcement. I can't >be the only one who found it a bit annoying. I didn't find anything annoying in the original announcement. I thought Dan explained the situation quite clearly. Sure there was plenty of room to disagree with some of his opinions, but it was easy to distinguish fact from opinion. >In this case it would probably have been enough to say "I seem to have >found a security bug in BSD ttys; the following vendors and versions are >known to be affected; the following are known to be OK; for further >details mail me at

." No big fuss, no cause celebre, just >quiet, effective response. Sorry for the "grammatical" correction, but didn't you intend that last sentence to read: No big fuss, no cause celebre, just quiet, INeffective NONresponse. -- =*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*= Neil W. Rickert, Computer Science Northern Illinois Univ. DeKalb, IL 60115 +1-815-753-6940