From: Westcan1@softnc1.softnc.com (West Canadian Graphics)
Date: Tue, 17 Oct 95 11:49:55 PDT
To: cypherpunks@toad.com
Subject: Re: Netscape rewards are an insult
Message-ID: <9510171851.AA13486@softnc.com>
MIME-Version: 1.0
Content-Type: text/plain


::
Request-Remailing-To: cypherpunks@toad.com
Subject: Re: Netscape rewards are an insult


> > Promoting the notion that hackers are earnestly attacking
> > Netscape and reporting its bugs increases its credibility to
> > the stock market porkers. Is that not why dear
> > all-too-attentive Jeff has been assigned duty on this list,
> > feeding peanuts to chimp hackers and champ newshacks?

Whoa!!

> I'm afraid you're a little out of line here.
> I've worked with Jeff at a couple different companies
> over the last 6 years.  Besides being a very good programmer
> he's also one of the people I consider the most resistant
> to corportate bullstuff (beleive me, we both got a lot of it at MicroUnity).
> I'm sure he's on this list because he thinks it's a good
> idea to pay attention to it.

Maybe he is, but I'd rather hear everyone speak for themself.  You can
speak for you.  And you can let Jeff speak for himself.  And I'd rather
that Netscape speak for itself, too.

Is Jeff or any of the other netscape posters here officially??

Or are they here, just out of personal curiosity (without their employers
knowledge, I mean ...) cause they have a whole lot of spare time on their
hands to learn about cryptography and security.

I wish one of them (or Netscape) would make an official comment to make
sure that the record is straight, and that there is no mis-reporting.

> What the hell is wrong with you people?  Up 'til a few months
> ago, the oft-heard refrain on cipherpunks was "why won't the
> software vendors listen to us?"... now they're listening,

Yep, they seem to be listening.  They just don't seem to be talking.

Can someone say something, please??  Is it true that:

        - Netscape has known about this problem since last week's
          scathing public attack and demonstration of the problem
          which included sample code posted to the Internet??

        - If you run and use a Netscape client, that any machine
          anywhere in the world if it's on the Net could retrieve
          all of the files off of your hard drive or LAN??

          Or even worse ... erase files on your Hard drive and
          wipe you out??

        - Even if your machine is behind a firewall or proxy server,
          that there is no protection??  That you can't do anything??

Can someone comment, please??


          (Carbon copy sent to: postmaster@netscape.com,
                                cypherpunks@toad.com,
                                cert@cert.org)