[31413] in bugtraq
Re: Windows Update: A single point of failure for the world's
daemon@ATHENA.MIT.EDU (Paul Schmehl)
Wed Sep 3 18:37:45 2003
Date: Wed, 03 Sep 2003 10:56:29 -0500
From: Paul Schmehl <pauls@utdallas.edu>
To: Stefano Zanero <stefano.zanero@ieee.org>,
BugTraq <BUGTRAQ@securityfocus.com>
Message-ID: <2705798112.1062604589@utd49554.utdallas.edu>
In-Reply-To: <08bc01c36ff2$5ee1c910$03c8a8c0@vplab.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--On Sunday, August 31, 2003 09:01:49 PM +0200 Stefano Zanero
<stefano.zanero@ieee.org> wrote:
>
> Enabling a world-wide auto-update feature does indeed seem much of a
> security risk to me.
>
More of a risk than up2date for RedHat or emerge -u system for Gentoo? Or
cvsup for *BSD?
Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
