[67308] in North American Network Operators' Group
Re: Stopping open proxies and open relays
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Sat Feb 7 14:46:53 2004
To: Petri Helenius <pete@he.iki.fi>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Sat, 07 Feb 2004 20:27:11 +0200."
<40252DFF.1060201@he.iki.fi>
From: Valdis.Kletnieks@vt.edu
Date: Sat, 07 Feb 2004 14:45:06 -0500
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_-382016388P
Content-Type: text/plain; charset=us-ascii
On Sat, 07 Feb 2004 20:27:11 +0200, Petri Helenius said:
> It would help if systems would only execute code that is signed
> properly. This would make malware traceable. However the current way of
> getting your code signed is in many cases too costly for the casual open
> source developer so people are used to running unsigned or selfsigned
> application even when the facilities to check signatures would already
> exist in the system. (though for example in Windows, signatures are only
> checked at install, not runtime)
People are used to doing dumb things. Here's a depressing story:
http://www.pcpro.co.uk/news/news_story.php?id=53390
--==_Exmh_-382016388P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFAJUBCcC3lWbTT17ARAk4UAKDxFz6jx5hXLrLkwFHivPFV2N7xmwCeM7rM
ITO+q6Kwq5an3GPrUOQ/vp8=
=rbXp
-----END PGP SIGNATURE-----
--==_Exmh_-382016388P--