lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: dufresne at winternet.com (Ron DuFresne)
Subject: Fwd: Re: Administrivia: Binary Executables
 w/o Source

On 19 Aug 2003, Russell Fulton wrote:

> On Tue, 2003-08-19 at 13:24, Valdis.Kletnieks@...edu wrote:
>
> >
> > (OK, so a pointer to a website is more desirable, but sometimes it just doesn't
> > work as well - if it's a "We're being attacked by *this*" posting, there's no
> > guarantee you're still on the air when people read it.  And there's the problem
> > of knowing when to remove it from the website - some people might be on
> > vacation and not see the note till 3 weeks from now...)
>
> There are a *few* cases where binary attachments are appropriate.
>
> How about attachments invoke automatic moderation  (i.e. any messages
> with attachment get shunted to the moderator for approval).
>

This sounds like a decent workgap, if the moderators are going to wish to
invest the added resources.  Of course, it might be expanded if they are
willing to provide more resources <list members us all, being gluttons
here for 'services'>, and rather then decide to approve binaries, to post
it to a website themselves, thus not *offending* anyone silly enough to
execute them, and allowing readers to decide if grabbing it is of merit to
them.  This does make an argument about enabling idiots to do more stupid
things, but, then again, they are most likely already available to these
folks already...

Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ