[95001] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: botnets: web servers, end-systems and Vint Cerf

daemon@ATHENA.MIT.EDU (James Blessing)
Fri Feb 16 13:34:41 2007

Date: Fri, 16 Feb 2007 17:56:42 +0000
From: James Blessing <james.blessing@entagroup.com>
To: michael.dillon@bt.com, nanog <nanog@merit.edu>
In-Reply-To: <2DA00C5A2146FB41ABDB3E9FCEBC74C10106700B@i2km07-ukbr.domain1.systemhost.net>
Errors-To: owner-nanog@merit.edu


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

michael.dillon@bt.com wrote:

> You misunderstand. The problem of securing machines *IS* solved. It is
> possible. It is regularly done with servers connected to the Internet.
> There is no *COMPUTING* problem or technical problem. 

True *BUT* (and this is a really big but) it requires that you do something
*BEFORE* you connect it to the Internet.

> The problem of the 100 million machines is a social or business problem.
> We know how they can be secured, but the solution is not being
> implemented.

Whilst the problem is social in terms of people not knowing/wanting to do the
securing before connecting, the technical solution is to make the software
secure by default. If you think anything else then you are delusional.

J

- --
COO
Entanet International
T: 0870 770 9580
http://www.enta.net/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF1fBaR+KszLBLUT8RAo+AAJ97RxMBhyZY2MQMRAFs3KWM7EPkHACgqebN
g/nOPkbZffyEDoWAIEvQUK0=
=w0iC
-----END PGP SIGNATURE-----

home help back first fref pref prev next nref lref last post