[plug] incase anyone wasnt aware..CERT advisory [ BIND ]

[The Thought Assassin]

On Tue, 14 Nov 2000, Beau Kuiper wrote:
> On Tue, 14 Nov 2000, Christian wrote:
> > On Tue, Nov 14, 2000 at 11:12:10AM +0800, Desiree wrote:
> > > CERT Advisory CA-2000-20 Mulitple Denial-of-Service Problems in ISC BIND
> > There are new security bugs announced several times daily so I'm not
> > sure that we need to post them to this list (unless it's very
> > specifically on topic with regards to a current or recent discussion).
> Give him [sic - Desiree is more likely a "her"] a break Christian, BIND
> is a program most linux administrators use, including me.
All of which already know about the CERT advisory.

> I don't see how it is off-topic at all on a linux mailing list.
This is not a security alert list. Discussion on how to patch such a
problem, how to tell if a system is vulnerable, how an exploit might work,
or how to detect a cracking attempt - those things would probably be
on-topic here. Announcements like the above are not, for reasons stated.

> Most security bugs listed on bugtrack are for obscure programs most people
> don't use.
It's good to see you read bugtraq. Why then, do you need things reposted
here? At any rate, BIND is an obscure program most people don't run. (OK,
so everyone _uses_ it if you want to get technical. :)

To me, Christian's reply looked like a polite and gentle pointer for a
newish list member. I am sure he didn't mean to be offensive, and he
certainly didn't give me the impression he was admonishing Desiree for not
being aware of the finer points of mailing list etiquette.

-Greg Mildenhall