Tony Harminc wrote:
In any case, it should be obvious that the best policy, when dealing with
potentially serious integrity exposures, is secrecy.

I'd say it's far from obvious. Intelligent and informed people differ
on this topic, and there is no consensus.

Regardless of what others might do, IBM keeps integrity APARs secret. I fully agree with their philosophy.

For a good example, check out APAR OW53788. It's the User Key 8 CSA integrity APAR for IXFP -- a problem I reported _many_ years ago when we still had RVA DASD. You'll get a funny message from IBMLink if you try to display it.

For more information on this APAR, see:
http://bama.ua.edu/cgi-bin/wa?A2=ind0606&L=ibm-main&P=R97713&I=1
http://bama.ua.edu/cgi-bin/wa?A2=ind0307&L=ibm-main-archives&P=R13332&I=1

--
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to