[67308] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Stopping open proxies and open relays

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Sat Feb 7 14:46:53 2004

To: Petri Helenius <pete@he.iki.fi>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Sat, 07 Feb 2004 20:27:11 +0200."
             <40252DFF.1060201@he.iki.fi> 
From: Valdis.Kletnieks@vt.edu
Date: Sat, 07 Feb 2004 14:45:06 -0500
Errors-To: owner-nanog-outgoing@merit.edu


--==_Exmh_-382016388P
Content-Type: text/plain; charset=us-ascii

On Sat, 07 Feb 2004 20:27:11 +0200, Petri Helenius said:

> It would help if systems would only execute code that is signed 
> properly. This would make malware traceable. However the current way of 
> getting your code signed is in many cases too costly for the casual open 
> source developer so people are used to running unsigned or selfsigned 
> application even when the facilities to check signatures would already 
> exist in the system. (though for example in Windows, signatures are only 
> checked at install, not runtime)

People are used to doing dumb things.  Here's a depressing story:

http://www.pcpro.co.uk/news/news_story.php?id=53390



--==_Exmh_-382016388P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFAJUBCcC3lWbTT17ARAk4UAKDxFz6jx5hXLrLkwFHivPFV2N7xmwCeM7rM
ITO+q6Kwq5an3GPrUOQ/vp8=
=rbXp
-----END PGP SIGNATURE-----

--==_Exmh_-382016388P--

home help back first fref pref prev next nref lref last post