Re: Security through obscurity, etc.

[jason () dickory sdsu edu (Jason Matthews)]

On Tue, 13 Dec 1994, jsz wrote:

> CERT consists of beaurocrats; 8lgm of posers -- what's a difference, 
> after all?

8lgm does not pretend to be god's gift to the net.

> At least you can't use CERT's advisory to crack root on a site, and wipe
> out important files; 8lgm's advisories were, and in fact are being used
> for those purposes as well.

I am sure this has been said by doozens of people but:
If you restrict exploits to the script hackers then only the script hackers
will know what they are. In turn, organizations like CERT will not know 
what they are until some time after the release; when the effects can be 
exaimed second hand.

Pick your posion.

Jason

----------------------------------------------------------------------------
jason () dickory sdsu edu                         San Diego State University
jason () mentor sdsu edu                    College of Engineering
jason () BOOM extern ucsd edu               Electrical*Computer Engineering 
----------------------------------------------------------------------------