> > PS - expect an advisory from CERT sometime in 1995 - maybe. I expect to see nothing from CERT on this. It isn't the cause of any current, widespread breakins, for instance. It isn't their job to research bugs or report them; they do incident response. If you are going to make any kind of point at all about this, you ought to ask how long before Sun issues an advisory and patch. --spaf