'we should all be uncomfortable with the extent to which luck..'

Wed Jul 25 17:24:50 UTC 2001

On 7/25/2001, 1:14:37 PM, Mark Boolootian <booloo at cats.ucsc.edu> wrote:
> > Here? Probably not all that many.

> I wouldn't be so sure.   You might want to take a look at the first 
couple
> of minutes of this session from the last NANOG meeting:

>   http://www.nanog.org/mtg-0105/real/dnssec.ram

> It suggests that many (most?) of the NANOG attendees are shipping 
passwords
> around in the clear (not necessarily all telnet, but indicative of a 
mindset).
> I think this suggests the problem is far worse than most people imagine.

I think the real suprise to me was at the Pittsburgh IETF, and the number
of people sitting on the wireless LAN in the Security Area open meeting
whose passwords were sniffed and posted on the overhead projector.

if there were ever a bunch of people who were supposed to know better...

richard