[3267] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: FWD: Re: you creeps

daemon@ATHENA.MIT.EDU (Dave Dittrich)
Wed Oct 16 15:47:14 1996

Date: Wed, 16 Oct 1996 10:15:27 -0700 (PDT)
From: Dave Dittrich <dittrich@cac.washington.edu>
To: "Harry Nicholos, NC State Univ. -- Computing Center" <nicholos@ccvs2.cc.ncsu.edu>
cc: www-security@ns2.rutgers.edu
In-Reply-To: <009A9EC7.0C74C220.3@ccvs2.cc.ncsu.edu>
Errors-To: owner-www-security@ns2.rutgers.edu

> >I've contacted the system administrator at infonex.com....loki@OBSCURA.COM
> >
> >Looks like it may be time to make this a moderated list....??
> 
> I think the list can be configured so that only subscribers can post without
> the burden of moderation.
> 
> Cheers,
> Harry

It may be too late to do that.  Currently, anyone can get a list of
all the subscribers and it isn't rocket science (heck, it's not even
science) to fake email as a subscriber:

>>>> who www-security
Members of list 'www-security':

www-archive@noc.rutgers.edu
drummond@aristarchus.rutgers.edu (Walt Drummond)
"Simon Cooper" <sc@corp.sgi.com>
rapatel@theophilus.rutgers.edu (Rocky - Rakesh Patel)
luchihli@noc.rutgers.edu
Mel Pleasant <pleasant@sgi.com>
Charlie Kaufman <kaufman@iris.com>
chang@cs.umd.edu (Michael Chang)

home help back first fref pref prev next nref lref last post