beating about the bush (not)

Wed Jan 31 04:03:59 UTC 2001

 I'm in favor of the following:

 	Honesty.  Publish what you have.

 If you must, lie. Publish an version that "blends" with the prevaling 
        landscape if you must. Such behaviour is wrong and may lead 
	to further probes since the reported version and the server behaviour 
 	don;t jibe.
 I'm never in favor of "boasts" or "taunts". That is tantamount to asking for
 	further investigation.
 Blocking queries leads to a false sense of security. Someone will figure out
   	what your running anyway.

-------
> 
> Bill - just a quick question about your post today (pasted below).  You're
> hinting at what might be a more prudent thing to do, but I'm not getting the
> hint.
> 
> Would you rather deny the version.bind query, give an intriguing answer
> (e.g. "bad-ass-bind"), an intentionally misleading answer (e.g. 4.8.1 or
> 9.5.6), or what?
> 
> ----