I got the reference to chfn (change finger information) from an old edition of UNIX System Administration Handbook by Nemeth, Snyder, and Seabass. At least they consider the ability to * change * someone's personal information "to be either obscene or incorrect" a "misuse", and they offer information on how to use "comma magic" to null a field, so I can leave out my home phone number. But, like people who use their SSN as their driver's license number, if you don't know why you shouldn't, you don't much care that you could not. Until you get calls at 2AM asking if your server is running, and suggesting you catch it... Pardon me while I digress, but some four years ago, the Commonwealth of Massachusetts passed a law against retailers writing the customer's driver's license number on their checks, because most people use their SSN. Now there's some backwards reasoning; why not just issue their own driver's license numbers? I think that the legislation was backed by companies who make check cashing cards, as each grocery chain has their own check cashing card now. Sheesh. > -----Original Message----- > From: James B. Byrne [SMTP:[log in to unmask]] > Sent: Friday, May 15, 1998 6:48 AM > To: [log in to unmask] > Subject: Re: [HP3000-L] xxx is out of the office. > > On 14 May 98 at 12:50, Stigers, Greg ~ AND wrote: > > > But common sense? I looked up finger in my UNIX books, and did > > The reason that I used the term "common sense" is because finger > is NOT viewed as a security problem. This is because techies > don't consider personable information a security issue. At > least not their's. <snip>