>>>>> On Mon, 25 Oct 93 08:29:57 -0400, John A. Murphy <jam @
philabs .
philips .
com> said:
jam> The major problem I see with giving "authorized" people the
jam> insights to vulnerabilities is there are a number of people
jam> wearing 2 hats. Valid admin's working for a company, while at
jam> the same time trying to (personally or professionally) break
jam> into a competitor.
That's why the information should be public instead of limited to some
self-elected security cabal-cum-self-appreciation group. Echoes of
FIDONET.
I like the picture you paint of sysadmins engaging in espionage for
their employer. Reminds me of Neuromancer. How's life in the philips
arcology? If you want to defect, the IMS extrqaction team will bust
you out... :)
jam> While I would love to know security problems out of both need
jam> and curiosity, I'm glad the information is not readily
jam> accessible.
Professional crackers have the information. Sysadmins do not. I think
that speaks for itself.
-Rens
References:
|
|
