full-disclosure - Re: Gates: 'You don't need perfect code' for good security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <017801c3a01e$f0b2d260$231a90d8@NTAUTHORITY>
From: geoincidents at getinfo.org (Geoincidents)
Subject: Re: Gates: 'You don't need perfect code' for good security

> And recent experience shows that the virus is a world-wide issue before
> the new signatures come out for it.

I think that's more a problem for network spreading of a worm like slammer
or email virus than it is for a virus that infects files you might store on
a memory stick. Typically that type of virus spread would be delayed long
enough that AV should be updated already. But yes, what you suggest is a
possibility.

However, I wasn't saying this is how you create a "secure" network, I was
just trying to point out one way to deal with the laptop issue. They aren't
trusted systems, don't put them on the trusted network segments.

Geo.