Re: CERT does it again.

[dynamo () IME NET (dynamo () IME NET)]

I had checked that site many days after and did not see it there.  Im glad
it was done, but that still doesnt make up for the fact that you guys
released the hole to an open list? (isnt it?)  Your workaround was wrong..
dynamo

On Tue, 22 Jul 1997, Lawrence R. Rogers wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
>
>
> > Im really let down by CERT.  From now on im posting straight to bugtraq.
> >
> > To CERT: i told you about this hole.  Without me, you wouldnt have known,
> > and the least you could do is get me the credit i deserved.
>
> The initial posting of these bulletins on July 15 did not include attribution
> to Aaron.  When he drew our attention to the fact that we had not credited
> him, updated bulletins were posted on July 17. These bulletins are available
> from:
>
>       ftp://info.cert.org/pub/cert_bulletins/VB-97.05.lynx
>       ftp://info.cert.org/pub/cert_bulletins/VB-97.06.lynx
>
> Note that Aaron's post to bugtraq is dated July 22.
>
> Aaron: we apologize for not letting you know that these updates had been made
> and made available on our FTP archive.
>
> FYI: here are the current credits as they appear in the updated bulletins:
>
>  VB-97.05.lynx
>   The CERT Coordination Center staff thanks Aaron of Internet Maine for
>   reporting the problem and thanks Jim Spath and his lynx-dev colleagues for
>   their cooperation in developing this bulletin.
>
>  VB-97.06.lynx
>   The CERT Coordination Center staff thanks Aaron of Internet Maine for
>   calling our attention to the problem and thanks Jim Spath and his lynx-dev
>   colleagues for their cooperation in developing this bulletin.
> - --
>
>                                       Larry Rogers
>                                       Member of the Technical Staff
>                                       CERT* Coordination Center
>                                       Software Engineering Institute
>                                       Carnegie Mellon University
>                                       4500 Fifth Avenue
>                                       Pittsburgh, PA  USA  15213-3890
>
> Internet e-mail:  cert () cert org
>       (monitored during business hours)
> Telephone:  +1 412-268-7090
>       (24-hour hotline
>       CERT Coordination Center personnel answer
>       8:30 a.m.- 5:00 p.m. EST(GMT-5)/EDT(GMT-4)
>       on call for emergencies during other hours)
>
>
> Registered U.S. Patent and Trademark Office
>
> The CERT Coordination Center is part of the Software Engineering
> Institute (SEI). The SEI is sponsored by the Department of Defense.
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
>
> iQCVAwUBM9UWVnVP+x0t4w7BAQGAgQP/VKZe4UadZO1fjLtg+I6Pb3rXTCZnyE2M
> +jfL1J/nrt0rO582+Mg3nPZ5YkqhWhYKRN1+DSh8HyokrXVh+cc9totHSm5sz9e2
> shE9CdzWHFNfJr9KAi99hjweQK8v3+7Iu9+LX7bIBpx+enTSboXGmGhjubG0eClf
> SC1K9orpPjE=
> =SydU
> -----END PGP SIGNATURE-----