Re: [iwar] Comment on DMCA, Security, and Vuln Reporting - a different view (fwd)

From: Tim Kramer (kramert@mlrnoc.navy.mil)
Date: 2002-08-01 12:12:09


Return-Path: <sentto-279987-5106-1028229068-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Thu, 01 Aug 2002 12:22:08 -0700 (PDT)
Received: (qmail 20254 invoked by uid 510); 1 Aug 2002 19:16:15 -0000
Received: from n19.grp.scd.yahoo.com (66.218.66.74) by all.net with SMTP; 1 Aug 2002 19:16:15 -0000
X-eGroups-Return: sentto-279987-5106-1028229068-fc=all.net@returns.groups.yahoo.com
Received: from [66.218.67.199] by n19.grp.scd.yahoo.com with NNFMP; 01 Aug 2002 19:11:08 -0000
X-Sender: kramert@mlrnoc.navy.mil
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_7_4); 1 Aug 2002 19:11:07 -0000
Received: (qmail 7659 invoked from network); 1 Aug 2002 19:11:06 -0000
Received: from unknown (66.218.66.216) by m6.grp.scd.yahoo.com with QMQP; 1 Aug 2002 19:11:06 -0000
Received: from unknown (HELO mail.mlrnoc.navy.mil) (138.139.52.8) by mta1.grp.scd.yahoo.com with SMTP; 1 Aug 2002 19:11:06 -0000
Received: from intmgmtws1.mlrnoc.navy.mil (intmgmtws1.mlrnoc.navy.mil [138.139.52.9]) by mail.mlrnoc.navy.mil (8.11.0/8.11.0) with ESMTP id g71J8kQ05471; Thu, 1 Aug 2002 15:08:46 -0400
To: iwar@yahoogroups.com
Cc: Information Warfare Mailing List <iwar@yahoogroups.com>
In-Reply-To: <200208011256.g71Cu5v09001@red.all.net>
References: <200208011256.g71Cu5v09001@red.all.net>
X-Mailer: Ximian Evolution 1.0.5 
Message-Id: <1028229135.3071.57.camel@intmgmtws1.mlrnoc.navy.mil>
From: Tim Kramer <kramert@mlrnoc.navy.mil>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: 01 Aug 2002 15:12:09 -0400
Subject: Re: [iwar] Comment on DMCA, Security, and Vuln Reporting - a different view (fwd)
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, hits=-101.7 required=5.0 tests=IN_REP_TO,SUBJ_HAS_SPACES,USER_IN_WHITELIST version=2.20
X-Spam-Level: 

You can yell fire in a crowded theater....

... if it's actually on fire.

It's bad juju to have someone hide something that can/will
hurt others in the long run.  I reported to MS that their
clustered Exchange boxes would crash when subjected to a
CNAME loop in June of 2001.  (Easily caused by a return
receipt to the bad e-mail address.)  You'd think I'd have 
heard from them by now.

Admittedly, an exploit for this sort of thing would take
all of five minutes to create but it would be the exception
to the rule.  I too would like to know about the vulnerabilites
before the exploits have been created.

- Tim



------------------------ Yahoo! Groups Sponsor ---------------------~-->
Discover Remote PC Acess Now
http://us.click.yahoo.com/p5uw2C/1ncEAA/Ey.GAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2002-10-01 06:44:32 PDT