Path: utzoo!utgpu!water!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!mailrus!ames!pacbell!sactoh0!ejnihill From: ejnihill@sactoh0.UUCP (Eric J. Nihill) Newsgroups: news.sysadmin Subject: Re: Security checkup Summary: maybe not post, but.. Keywords: security intruder self-help Message-ID: <443@sactoh0.UUCP> Date: 5 Oct 88 20:05:12 GMT References: <167@carpet.WLK.COM> <1454@lznv.ATT.COM> <1834@ddsw1.MCS.COM> Distribution: na Organization: Sacramento Public Access, Ca. USA Lines: 34 In article <1834@ddsw1.MCS.COM>, karl@ddsw1.MCS.COM (Karl Denninger) writes: > In article <1454@lznv.ATT.COM> ziegler@lznv.ATT.COM (J.ZIEGLER) writes: > >Please, please, please!! Anyone with knowledge enough to answer > >this question, DO NOT POST IT TO THE NET!!!! Electronic mail and > >net postings are grossly inappropriate places to discuss security. > > > The more information, the better. You can't plug a hole you don't know > exists. Nearly _all_ holes can be effectively defused IF you know they > exist. > As a SA , a fairly new SA, I would be interested in learning about what security leaks are out there. I am all to well aware that there are many on both sides of the fence with more knowledge than I and some are always wanting to prove it. However, the danger of posting it to the net is not that you will teach the knowledgeable, but may provide the missing link to those that are stymied by the current protection scheme of the system that they are on. I am for the distribution of knowledge, but only to the appropiate people. One way to do that would to be send out any request for security information via mail. Address ..foo!bar!root By sending to root only, you are putting a semi-control on the distribution. The "sysop, postmaster, etc." may not always be root. Yes, send me any information that you may think I should know regarding security, but send it to root. Eric ...pacbell!sactoh0!root -- ################################################################# # Sign In Triplicate before # Serving The State Capitol Of # # Discarding:________________ # California: sactoh0 # #################################################################