I got the reference to chfn (change finger information) from an old
edition of UNIX System Administration Handbook by Nemeth, Snyder, and
Seabass. At least they consider the ability to * change * someone's
personal information "to be either obscene or incorrect" a "misuse", and
they offer information on how to use "comma magic" to null a field, so I
can leave out my home phone number. But, like people who use their SSN
as their driver's license number, if you don't know why you shouldn't,
you don't much care that you could not. Until you get calls at 2AM
asking if your server is running, and suggesting you catch it...

Pardon me while I digress, but some four years ago, the Commonwealth of
Massachusetts passed a law against retailers writing the customer's
driver's license number on their checks, because most people use their
SSN. Now there's some backwards reasoning; why not just issue their own
driver's license numbers? I think that the legislation was backed by
companies who make check cashing cards, as each grocery chain has their
own check cashing card now. Sheesh.

> -----Original Message-----
> From: James B. Byrne [SMTP:[log in to unmask]]
> Sent: Friday, May 15, 1998 6:48 AM
> To:   [log in to unmask]
> Subject:      Re: [HP3000-L] xxx is out of the office.
>
> On 14 May 98 at 12:50, Stigers, Greg ~ AND wrote:
>
> > But common sense? I looked up finger in my UNIX books, and did
>
> The reason that I used the term "common sense" is because finger
> is NOT viewed as a security problem.  This is because techies
> don't consider personable information a security issue.  At
> least not their's.
        <snip>