Re: Security through obscurity, etc.

[isdmill () gatekeeper ddp state me us (David Miller)]

On Mon, 12 Dec 1994, Jason Matthews wrote:

> On Tue, 29 Nov 1994, That Whispering Wolf... wrote:
[...]
> > Well, this is just my $.02. I think if 8lgm continues they way they're
> > going (with things like their SCO 'login' problem -- Which basically said "There's a bug, no fix and no workaround, 
> > so nyah"), I'd rather just see them 
> > go away. I echo Pat's comments (I think that was Pat) about only needing
> > one CERT.
>
> I would rather have 8lgm then CERT. 
>
> Jason

So would I.  And the reason for this is that with 8lgm there is a 
credible threat for near term disclosure: enough of a threat to force the 
vendors to react.  Reporting bugs to CERT does nothing to motivate vendors.

--- David
----------------------------------------------------------------------------
                It's *amazing* what one can accomplish when 
                    one doesn't know what one can't do!