Received: by taz.hyperreal.com (8.6.12/8.6.5) id KAA06748; Fri, 31 May 1996 10:15:40 -0700 Received: from life.ai.mit.edu by taz.hyperreal.com (8.6.12/8.6.5) with SMTP id KAA06743; Fri, 31 May 1996 10:15:38 -0700 Received: from volterra.ai.mit.edu by life.ai.mit.edu (4.1/AI-4.10) for new-httpd@hyperreal.com id AA11924; Fri, 31 May 96 13:15:35 EDT From: rst@ai.mit.edu (Robert S. Thau) Received: by volterra.ai.mit.edu (8.6.12/AI-4.10) id NAA02423; Fri, 31 May 1996 13:15:34 -0400 Date: Fri, 31 May 1996 13:15:34 -0400 Message-Id: <199605311715.NAA02423@volterra.ai.mit.edu> To: new-httpd@hyperreal.com Subject: Re: Security interest Sender: owner-new-httpd@apache.org Precedence: bulk Reply-To: new-httpd@hyperreal.com Maybe someone could write a robot (spit spit) to use cgi-bin/perl to remove cgi-bin/perl from people's servers :-) I'm not even sure it's a bad idea... hell, it's a lot better for them than some of the other things that could happen, though they might not exactly see it that way themselves. rst