[55536] in North American Network Operators' Group
Re: What could have been done differently?
daemon@ATHENA.MIT.EDU (Scott Francis)
Thu Jan 30 20:26:15 2003
Date: Thu, 30 Jan 2003 17:23:32 -0800
From: Scott Francis <darkuncle@darkuncle.net>
To: Koji Hino <hino@ccrl.sj.nec.com>
Cc: nanog@merit.edu
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
Koji Hino <hino@ccrl.sj.nec.com>, nanog@merit.edu
In-Reply-To: <20030130.103917.10911831.hino@ccrl.sj.nec.com>
Errors-To: owner-nanog-outgoing@merit.edu
--GvXjxJ+pjyke8COw
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Jan 30, 2003 at 10:39:17AM -0800, hino@ccrl.sj.nec.com said:
> IIRC, MS's patches has been digitally signed by MS, and their patching
> system checks these sign silently. So, they will claim that
> compromised route info and/or DNS spoofing does not affect their
> correctness.
>=20
> Though, I'm not sure what will happen in key revoking situation.
interesting side note ... top of the page right now at http://www.ntk.net
details a similar problem facing MS in the UK currently. (Remember when they
forgot to renew hotmail.com, and some kind Linux geek fixed it for them ...
well, apparently their entry in the Data Protection Register (UK) expired
January 8. This means all personal data held by them in the UK is now illeg=
al
(passport, anyone?) I wonder if something like this would be useful (or even
possible) in the US, of if it would be just another opportunity for
bureaucratic bungling ...)
> Koji
--=20
-=3D Scott Francis || darkuncle (at) darkuncle (dot) net =3D-
GPG key CB33CCA7 has been revoked; I am now 5537F527
illum oportet crescere me autem minui
--GvXjxJ+pjyke8COw
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)
iD8DBQE+OdATWaB7jFU39ScRAgEEAKC+elWRaVmy/rTbTwsfK6vwL9H71wCcD68q
DfVJi9GQ3P7pyItPJXHtnLc=
=sbIx
-----END PGP SIGNATURE-----
--GvXjxJ+pjyke8COw--
