Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!romp!auschs!awdprime!testsys.austin.ibm.com!mbrown From: mbrown@testsys.austin.ibm.com (Mark Brown) Newsgroups: comp.org.eff.talk Subject: Re: Student suspended for distributing /etc/passwd Message-ID: <8670@awdprime.UUCP> Date: 21 Jun 91 15:12:56 GMT References: <1991Jun21.000442.16672@murdoch.acc.Virginia.EDU> <1991Jun18.165528.19569@athena.cs.uga.edu> <8589@awdprime.UUCP> Sender: news@awdprime.UUCP Reply-To: mbrown@testsys.austin.ibm.com (Mark Brown) Lines: 38 gl8f@astsun9.astro.Virginia.EDU (Greg Lindahl) writes: | mbrown@testsys.austin.ibm.com (Mark Brown) writes: | | >Why shouldn't the student be forced to get permission *first*, before | >trying to compromise a system others use? | | The question was about running COPS. You can run COPS without | compromising anything -- it tests for security holes, it doesn't break | in and delete files. The *question* is "why should students be criticized for probing security?". COPS is just one method used. | I see no reason why I, Joe Average User with no interest in breaking | in, but a big interest in protecting my confidential files, should | have to plead with the admin to run COPS. I just run it. I see no reason why I, Sam Harried-Administrator with 2000 users on 25 systems, should have to investigate the intent of every user who trips one of my security alarms. I'm not against the testing of system security. I just think it's common courtesy to ask permission first, since I'm responsible for the system you are "testing" (perhaps with a program more destructive - witness the Morris case). And, since [here comes the flame-bait] student users in general tend to be more inquisitive and less respectful of the system [flame bait over] [CAVEAT- I use my own student experience as an example] I would *require* permission in a University environment. [Dons asbestos underwear] DISCLAIMER: My views may be, and often are, independent of IBM official policy. Mark Brown IBM PSP Austin, TX. | Crazed Philosophy Student (512) 823-3741 VNET: MBROWN@AUSVMQ | Kills 15 In Existential Rage! MAIL: mbrown@testsys.austin.ibm.com | --tabloid headline