[10868] in bugtraq
Re: Diversity
daemon@ATHENA.MIT.EDU (Stephen Woods)
Mon Jun 21 13:15:01 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Message-Id: <199906181711.KAA57954@cirrus.seas.ucla.edu>
Date: Fri, 18 Jun 1999 10:11:34 -0700
Reply-To: scw@SEAS.UCLA.EDU
From: Stephen Woods <scw@SEAS.UCLA.EDU>
To: BUGTRAQ@NETSPACE.ORG
> In *nix land, we don't rush out and buy more virus scanners, we fix the
> problem. Matter of fact, virus scanning on *nix networks tends to fall into
> the "I'll do it when i get around to it" area. *nix is a perfect example of
[...]
> Naturally this diversity means an exploit in one program is unlikely to be
> found in another.
>
> Diversity is certainly alive and flourishing, make no mistake.
One can make a reasonably convincing argument that many (most?) of
the cracking problems that exisit on various unix platforms are in fact
results of some form of monoculture (rpc.ttdbserver, statd +
mount/automout) having a common parentage are somewhat monoculture.
-----
Stephen C. Woods; UCLA SEASnet; 2567 Boelter hall; LA CA 90095; (310)-825-8614
Finger for public key scw@cirrus.seas.ucla.edu,Internet mail:scw@SEAS.UCLA.EDU
