[Info-vax] Questions and observations about OpenVMS

[abrsvc]

> BTW, Stephen pointed out that I am not the only person to ever find a 
> vulnerability on VMS. He's right about that, but also think about what 
> that means when considering if there are any more vulnerabilities 
> waiting to be found by other people who do this for a living instead 
> of just doing the one-off piece of research I did.
> Simon. 
> 

We can agree about this one, but the main point here is that you need to differentiate between attacks that require access to the system while logged into that system whether or not the account is captive and external attacks that aren't already connected.