[61607] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: What do you want your ISP to block today?

daemon@ATHENA.MIT.EDU (Matthew S. Hallacy)
Sun Aug 31 01:07:40 2003

Date: Sun, 31 Aug 2003 00:04:51 -0500
From: "Matthew S. Hallacy" <poptix@techmonkeys.org>
To: Valdis.Kletnieks@vt.edu, nanog@merit.edu
In-Reply-To: <200308301853.h7UIrk5s014200@turing-police.cc.vt.edu>
Errors-To: owner-nanog-outgoing@merit.edu



--/Uq4LBwYP4y1W6pO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 30, 2003 at 02:53:46PM -0400, Valdis.Kletnieks@vt.edu wrote:

> This, in fact, is the single biggest thorn in our side at the moment. It'=
s hard
> to adopt a pious "patch your broken box" attitude when the user can't get=
 it
> patched without getting 0wned first...
>=20

This is where you start forcing users through a captive portal to the update
site of their vendor, I think they'll get the idea when every site they try=
 to
bring up turns out to be windowsupdate.microsoft.com

[snip]

> Given the Lion worm that hit Linux boxes, and the fact there's apparently=
 a
> known remote-root (since fixed) for Apple's OSX, what operating systems w=
ould
> you consider "acceptable"?

Anything that's not currently infected, and is patched to the current 'safe'
level.

--=20
Matthew S. Hallacy                            FUBAR, LART, BOFH Certified
http://www.poptix.net                           GPG public key 0x01938203

--/Uq4LBwYP4y1W6pO
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE/UYHyXbLQQwGTggMRAtdaAKCksss9iIbw0x9S3mLBDD6lV8nyGgCfW4Fp
iC7dWiiJo6gMuOk1TrD9a/0=
=b/Th
-----END PGP SIGNATURE-----

--/Uq4LBwYP4y1W6pO--

home help back first fref pref prev next nref lref last post