home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: alt.irc
- Path: sparky!uunet!munnari.oz.au!manuel!coombs!avalon
- From: avalon@coombs.anu.edu.au (Darren Reed)
- Subject: Re: server bug being misused (how is a bug SUPPOSED to be used?)
- Message-ID: <avalon.716075450@coombs>
- Lines: 24
- Sender: news@newshost.anu.edu.au
- Organization: Computer Services Centre, Australian National University
- References: <1992Sep8.053814.18775@ctr.columbia.edu> <1992Sep8.200240.16487@news.ysu.edu>
- Date: 9 Sep 92 21:50:50 GMT
-
- doug@cc.ysu.edu (Doug Sewell) writes:
-
- >dougmc@ccwf.cc.utexas.edu (Doug McLaren) writes:
- >: In article <1992Sep7.223842.29975@jupiter.sun.csd.unb.ca> spencer@jupiter.sun.csd.unb.ca (ForHire-Confidential) writes:
- >:
- >: This is not just a problem with this server, but with most < 2.7.2g.
- >:
- >And it didn't help that a server maintainer, in a (vain) effort to con-
- >vince server-ops to upgrade, announced the bug to the entire newsgroup.
-
- >Really... I appreciate the effort they put in to improve the servers, but
- >actions like that lessen my appreciation somewhat...
-
- Server maintiners knew well before the announcement what the problem was
- and I tried to convey a sense of urgency with respect too applying the
- patch but it seems that it in many cases it was a fruitless effort for
- whatever reason(s).
-
- I dont think security by obscurity works because what does happen is you
- have a small group who know all the bugs and can exploit them when they
- feel like, giving them an unfair advantage over others.
-
- avalon.
-