Xref: utzoo news.sysadmin:1949 news.admin:4306
Path: utzoo!attcan!uunet!lll-winken!lll-tis!helios.ee.lbl.gov!pasteur!ames!vsi1!lmb
From: lmb@vicom.COM (Larry Blair)
Newsgroups: news.sysadmin,news.admin
Subject: Re: rnews: security hole. Too bad.
Keywords: bug
Message-ID: <1299@vsi1.COM>
Date: 15 Dec 88 18:13:01 GMT
References: <1219@altger.UUCP> <2567@stpstn.UUCP>
Reply-To: lmb@vicom.COM (Larry Blair)
Organization: VICOM Systems Inc., San Jose, CA
Lines: 12

In article <2567@stpstn.UUCP> aad@stpstn.UUCP (Anthony A. Datri) writes:
=If you're going to send articles somewhere, you've got to
=have some other machine that's explicitly willing to take it from you,

Not true.  You can dump news on any system that you have a uucp connection
to.  I could dump all of our news on, say, osu-cis, if I wanted to.  About
the only way they could stop me would be to remove "rnews" from the L.cmds
file (or remove the anonymous login).

I'm talking 2.11.14 here; I have no idea what Eric or Henry might have put
in their versions.
-- 
Larry Blair   ames!vsi1!lmb   lmb@vicom.com