[70216] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Worms versus Bots

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Wed May 5 13:39:39 2004

To: chuck goolsbee <chucklist@forest.net>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Tue, 04 May 2004 16:58:40 PDT."
             <p06100512bcbdd8182a5d@[10.0.1.40]> 
From: Valdis.Kletnieks@vt.edu
Date: Wed, 05 May 2004 13:38:56 -0400
Errors-To: owner-nanog-outgoing@merit.edu


--==_Exmh_-1810924992P
Content-Type: text/plain; charset=us-ascii

On Tue, 04 May 2004 16:58:40 PDT, chuck goolsbee <chucklist@forest.net>  said:
> 
> At 4:19 PM -0500 5/4/04, Laurence F. Sheldon, Jr. wrote:
> >chuck goolsbee wrote:
> >
> >>>However, up to 90% of the users *are* stupid:
> 
> I didn't say that, I only quoted (Valdis Kletnieks) it... to which I 
> replied that compensating for stupidity is a zero-sum game.

On Mon, 03 May 2004 20:53:50 PDT, Michel Py said:
> In other words: if one is stupid, one gets worm'ed or bot'ed.

My error - what I meant was "However, by that definition, 90% are stupid".

In fact, I'm in agreement with Steve Bellovin - either the users need to master
the technology (which isn't going to happen), or we need to fix the design and
HCI factors so that what ships *is* something that's actually usable.

> So maybe they WOULD be better with a "WebTV" model.

Have to admit, that model *does* solve the HCI issues..

> Or a Macintosh.

Actually, there's multiple solutions - remember that monocultures are bad. :)

> Perhaps there is a market for "safe Internet access"... I don't know. 
> But I suspect the barrier to entry is either making it work with the 
> dominant platform, or asking the market take the leap to another 
> platform. Both are unlikely. What I do know is that the dominant 
> platform is inherently insecure, and many of its users, those 
> "non-technical" folks I referred to... they seem to be mostly unaware 
> of the danger they pose to themselves and everyone else on the 
> Network.

The trick here is realizing that compensating for stupidity doesn't have
to be a zero-sum game.

Today's window of opportunity:

"Microsoft is expected to recommend that the "average" Longhorn PC feature a
dual-core CPU running at 4 to 6GHz; a minimum of 2 gigs of RAM; up to a
terabyte of storage; a 1 Gbit, built-in, Ethernet-wired port and an 802.11g
wireless link; and a graphics processor that runs three times faster than those
on the market today."

http://www.microsoft-watch.com/article2/0,1995,1581842,00.asp

So you have several years to convince people that there are cheaper/free
solutions that are more secure *and* don't require a forklift upgrade....

--==_Exmh_-1810924992P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFAmSawcC3lWbTT17ARAt4SAJ91gDeNw1HOXmp/8wKpKIiv+NU37QCg9asm
bdknEZR0L/D7IEGZCyvtRro=
=IwO0
-----END PGP SIGNATURE-----

--==_Exmh_-1810924992P--

home help back first fref pref prev next nref lref last post