Xref: utzoo news.admin:4094 news.sysadmin:1704 comp.mail.uucp:2373 Path: utzoo!attcan!uunet!husc6!cmcl2!nrl-cmf!mailrus!uflorida!novavax!proxftl!twwells!bill From: bill@twwells.uucp (T. William Wells) Newsgroups: news.admin,news.sysadmin,comp.mail.uucp Subject: Re: Dangerous hole in Usenet! Message-ID: <223@twwells.uucp> Date: 28 Nov 88 18:56:23 GMT References: <1227@vsi1.UUCP> <1247@vsi1.UUCP> Reply-To: bill@twwells.UUCP (T. William Wells) Organization: None, Ft. Lauderdale Lines: 22 In article <1247@vsi1.UUCP> lmb@vsi1.UUCP (Larry Blair) writes: : A lot of people thought I was wrong to not just post in the first place. : I still think that while it will help some sites, it leaves a lot more : more vulnerable. I'm of the opinion that you have done the right thing. Those who cared enough to secure their systems have benefitted; those who didn't may now pay the price for their carelessness. (This does ignore those who didn't get the message due to causes beyond their control, but there is no such thing as a perfect system.) : One thing that bugs the hell out of me: it takes about 30 seconds to create : a mail alias, but a lot of supposed administrators sent me mail like, "Gee, : we don't have a 'news' user here." Not all news administrators are system administrators; not all of them are permitted to make aliases. It is entirely possible to run a newsfeed without any special accounts. --- Bill {uunet|novavax}!proxftl!twwells!bill