full-disclosure - Calcuating Loss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: frank at knobbe.us (Frank Knobbe)
Subject: Calcuating Loss

On Tue, 2004-05-11 at 12:52, Valdis.Kletnieks@...edu wrote:
> We're fast approaching the point where a site can't do anything resembling a
> reasonable testing process and complete it before the worm arrives.

I think we're getting close to the point where we realize that patches
and virus signatures and such are not sufficient to protect networks
from worms and viruses. 

I meant to bring this up a month or so ago. After the NetSky.A-Z and
Bagle.A-Z and NextOne.A-Z, people should start realizing that they need
to escape the vicious circle of updating sigs and patching. Different,
deeper reaching measures need to be taken to reduce susceptibility to
these issues. Architectural changes are necessary to remove the
capabilities for these things to run, spread and thrive, not more
patches and virus signatures.

Sooner or later, individuals will find the answer. It's evolution in the
digital world.

Regards,
Frank
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040511/166e2afd/attachment.bin