[71183] in North American Network Operators' Group
Re: AV/FW Adoption Sudies
daemon@ATHENA.MIT.EDU (Paul G)
Thu Jun 10 14:49:17 2004
From: "Paul G" <paul@rusko.us>
To: "'Nanog'" <nanog@merit.edu>
Date: Thu, 10 Jun 2004 14:43:01 -0400
Errors-To: owner-nanog-outgoing@merit.edu
----- Original Message -----
From: "Eric Rescorla" <ekr@rtfm.com>
To: <Valdis.Kletnieks@vt.edu>
Cc: "Sean Donelan" <sean@donelan.com>; "'Nanog'" <nanog@merit.edu>
Sent: Thursday, June 10, 2004 2:37 PM
Subject: Re: AV/FW Adoption Sudies
-- snip ---
> If we assume that the black hats aren't vastly more
> capable than the white hats, then it seems reasonable to believe that
> the probability of the black hats having found any particular
> vulnerability is also relatively small.
and yet, some of the most damaging vulns were kept secret for months before
they got leaked and published. i won't pretend to have the answer, but fact
remains fact.
paul
