I designed and wrote
"limited-fingerd".
It's a very simple finger daemon. It allows users to turn off finger
requests for themselves, and also allows the administrator to turn off
all inspecific finger requests. It's written in python, so it's
relatively likely to be secure, unlike programs written in C.
