Path: utzoo!utgpu!watmath!clyde!att!rutgers!mit-eddie!bloom-beacon!gatech!ncar!boulder!sunybcs!bingvaxu!leah!itsgw!steinmetz!uunet!mcmi!hdr!eric From: eric@hdr.UUCP (Eric J. Johnson) Newsgroups: news.sysadmin Subject: Re: the how and why of plugging holes Summary: Are all vendors on the security mailing list? Keywords: security cliques lists Message-ID: <869@hdr.UUCP> Date: 12 Nov 88 16:10:49 GMT References: <456@l5comp.UUCP> <12081@dscatl.UUCP> <16600@agate.BERKELEY.EDU> <2279@looking.UUCP> <27203@tut.cis.ohio-state.edu> <4113@psuvax1.cs.psu.edu> Reply-To: eric@hdr.UUCP (Eric J. Johnson) Distribution: na Organization: Amperif Corporation. Omaha, NE Lines: 17 In article <4113@psuvax1.cs.psu.edu> schwartz@shire.cs.psu.edu (Scott Schwartz) writes: >For systems with sources, the current mechanisms are not bad. But I >really worry about the rest of them out there. At the very least, I >hope that all vendors of unix systems monitor ucb-fixes, and the >security mailing list, and just for fun, do something about what they ^^^^^^^^^^^^^^^^^^^^^ Ha! You assume, of course, that all vendors fit the criterion for being on the security mailing list. Unless one of the "Good 'Ol Boys/Girls" in the Security Cabal happens to work for the vendor, that probably won't occur. -- Eric J. Johnson, Amperif Corporation. UUCP: eric@hdr.UUCP I Have Something to Say: It's Better to Burn Out, Than to Fade Away! -The Kurgan