Xref: utzoo alt.sources.d:1831 comp.unix.internals:2777
Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!swrinde!cs.utexas.edu!chinacat!sequoia!rpp386!jfh
From: jfh@rpp386.cactus.org (John F Haugh II)
Newsgroups: alt.sources.d,comp.unix.internals
Subject: Re: kstuff 0.18 (part 1/6)
Summary: The fix is different for every different platform
Message-ID: <19274@rpp386.cactus.org>
Date: 14 May 91 15:06:39 GMT
References: <10678:May918:49:1491@kramden.acf.nyu.edu.<1991May11.200747.17465@scuzzy.in-berlin.de> <9105131716.AA17481@rodan.UU.NET>
Organization: River Parishes Programming, Austin TX
Lines: 34

In article <9105131716.AA17481@rodan.UU.NET>, kyle@UUNET.UU.NET writes:
> You did indeed post a fix.  But without the details, it's very
> hard for admins to come up with alternate solutions that don't
> impact their base of users and programs as much.  It's hard to
> close a hole if you don't know what it is.  Your proposed fixes
> might be complete and correct, but still not be the best for a
> particular installation.
> 
> Don't take this as another flame, it's not.  I'm just pointing
> out that reality often demands more than one solution to a
> problem.

One problem is that the changes that are needed really have to
be made by the vendors because the changes aren't the same for
every UNIX platform.  So he can't post a detailed fix.

On the other hand, posting the code that breaks into the system
will make it too easy on the programmers that haven't figured
it out yet and the vendors deserve a chance to get their butts
in gear.  My prediction is that Dan will post his code, a lot
of system will be broken into, and then Dan will be arrested
and hauled off to jail.  All because the vendors don't want to
be bothered.

Since this has sounded like a defense of Dan, I suppose I need
to attack him just to even things out ;-)  I've sent Dan a request
for his breakin suite (or whatever) and he hasn't provided it
yet.  I don't know if this is an oversight, or if he doesn't
believe that I actually work on AIX.
-- 
John F. Haugh II        | Distribution to  | UUCP: ...!cs.utexas.edu!rpp386!jfh
Ma Bell: (512) 255-8251 | GEnie PROHIBITED :-) |  Domain: jfh@rpp386.cactus.org
"If liberals interpreted the 2nd Amendment the same way they interpret the
 rest of the Constitution, gun ownership would be mandatory."