[16254] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: An interesting "new" computer security problem

daemon@ATHENA.MIT.EDU (David Honig)
Thu Sep 30 11:42:51 2004

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Wed, 29 Sep 2004 18:38:51 -0700
To: Anne & Lynn Wheeler <lynn@garlic.com>,
	pgut001@cs.auckland.ac.nz (Peter Gutmann)
From: David Honig <dahonig@cox.net>
Cc: cryptography@metzdowd.com
In-Reply-To: <6.1.2.0.2.20040927125349.0330ffb8@mail.comcast.net>

At 12:58 PM 9/27/04 -0600, Anne & Lynn Wheeler wrote:
>At 11:03 PM 9/24/2004, Peter Gutmann wrote:
>>A few days ago I was chatting with some people working on a government IT
>>project who had a rather complex security problem that they needed help
with.
>>They have a large number of users with Windows dumb terminals (think Xterms
>>but for Windows) connected to a central ASP server, which runs various
>>mutually untrusted apps from different vendors.  Their problem was that they
>>needed a means of securing the individual apps from each other.
>>
>>I told them that they were in luck, and this exact problem had already been
>>addressed before.  I'd drop off the detailed technical specs for the
solution
>>when I next saw them, they could recognise it by its bright orange cover.

Put each app on a separate machine, and don't put any networking
equiptment in the machines.  Simple.



=================================================
36 Laurelwood Dr
Irvine CA 92620-1299

VOX: (714) 544-9727 (home) mnemonic: P1G JIG WRAP

ICBM: -117.7621, 33.7275
PGP PUBLIC KEY: by arrangement

Send plain ASCII text not HTML lest ye be misquoted.  Really.

------

"Don't 'sir' me, young man, you have no idea who you're dealing with"
Tommy Lee Jones, MIB



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post