[80450] in North American Network Operators' Group
Re: Schneier: ISPs should bear security burden
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Sun May 1 17:38:39 2005
To: Brad Knowles <brad@stop.mail-abuse.org>
Cc: "Jay R. Ashworth" <jra@baylink.com>, Nanog <nanog@nanog.org>
In-Reply-To: Your message of "Sun, 01 May 2005 21:23:11 +0200."
<p0620073abe9adcdc1e58@[10.0.1.2]>
From: Valdis.Kletnieks@vt.edu
Date: Sun, 01 May 2005 17:38:00 -0400
Errors-To: owner-nanog@merit.edu
--==_Exmh_1114983480_10197P
Content-Type: text/plain; charset=us-ascii
On Sun, 01 May 2005 21:23:11 +0200, Brad Knowles said:
> At 1:07 PM -0400 2005-05-01, Valdis.Kletnieks@vt.edu wrote:
>
> > I don't think *anybody* seriously expects the bus company to deny passage
to
> > people who happen to be burglars using public transportation to get to the
ir
> > next work site....
>
> If they're wearing Balaclavas, full body armor, and carrying
> AK-47s, along with large sacks slung over their shoulders (either
> full or empty), then yes -- I would expect the bus driver to do
> everything he could to try to avoid picking them up.
But you see - that's because *those* passengers likely pose a threat to the
people *on the bus*. The fun starts when you start making passengers turn out
their pockets and you try to figure out if that guy dressed like a mechanic
heading home from work has a piece of bent metal in his pocket - is it an Allen
wrench or a lockpick (note that many SQL-injection attacks *are* that level of
subtlety - so it's not an outrageous comparison), and figure out what their
intentions are once the get off the bus...
(And remember - the TSA is trying to go that route. They now ban lighters
because somebody tried to light a shoe bomb with matches. Is that how
you want to run your network? ;)
--==_Exmh_1114983480_10197P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFCdUw4cC3lWbTT17ARAho3AJ9vbX0tSy9tcFDObqJDAwmMNTzFwACbBSYV
2RwU2d2BAyuP2YS78fiXSg4=
=Z/IZ
-----END PGP SIGNATURE-----
--==_Exmh_1114983480_10197P--
