| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 27 Dec 2006 00:47:07 +0100 (CET) From: Pavel Kankovsky <peak@...o.troja.mff.cuni.cz> To: Nguyen Pham <nguyen.petronius@...il.com> Cc: full-disclosure@...ts.grok.org.uk Subject: Re: emergent security properties On Mon, 18 Dec 2006, Nguyen Pham wrote: > The problem is that I can hardly find out some real examples in the > field of network security in terms of sub-networks, firewalls, servers, > applications, etc. with their corresponding security properties. A trivial emergent loss of security: You have some persons and every person is operating his or her own personal computer. No person has physical access to anyone else's computer. As long as the computers are isolated, the system can be quite secure even if in the presence of various security holes in software and hardware. The only person who can exploit them is (via) the owner of the computer. Connect all those computers to a network and... (Any similarity to any existing global network is purely coincidental.) I am afraid it will be pretty difficult to find an example where the security increases with complexity. Perhaps some Byzantine "security-breach tolerant" systems? --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists