Re: [fw-wiz] tunnel vs open a hole

From: Adam Shostack (adam@homeport.org)
Date: 04/08/03

  • Next message: Bruce Platt: "RE: [fw-wiz] tunnel vs open a hole"
    From: Adam Shostack <adam@homeport.org>
    To: Frederick M Avolio <fred@avolio.com>
    Date: Tue, 8 Apr 2003 15:40:57 -0400
    

    On Tue, Apr 08, 2003 at 03:07:08PM -0400, Frederick M Avolio wrote:
    |
    | Of course, encryption exacerbates the problem. :-) We can then gain a
    | tremendously high level of assurance that Dave Piscitello did something
    | over SSL to a particular IP address from a particular IP address. Which
    | adds authentication and little else on top of the paragraph you cited:

    Dave's a security expert. Their systems are notoriously 0wned. All
    we really know is that Dave, or one of the 350 kiddies who trade his
    passwords for a lark, did something. ;)

    Adam

    (Note to the sarcasm impaired: Dave and I have never met. I have no
    idea how secure or insecure his personal computer is. I've never seen
    a list of his passwords being traded.)

    -- 
    "It is seldom that liberty of any kind is lost all at once."
    					               -Hume
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    

  • Next message: Bruce Platt: "RE: [fw-wiz] tunnel vs open a hole"

    Relevant Pages

    • Re: Password Changes
      ... "Enforce password history" security policy setting as high as it will go ... people agreeing to set their passwords to the same thing. ... "Dave" wrote in message ... Is this any why that I can change all the user accounts passwords ...
      (microsoft.public.windows.server.sbs)
    • Re: Internet security
      ... "Dave" wrote in message ... prevents the passwords from being saved such that ... > they can be extracted and used to login to other sites. ... That's comforting, thanks. ...
      (microsoft.public.security)
    • Re: Auto Complete
      ... "Dave" wrote in message ... See AutoComplete Passwords: ... Please respond in Newsgroup. ... Protect your PC ...
      (microsoft.public.windowsxp.basics)
    • Re: Password Changes
      ... They want us to change all the passwords as ... "Franz Leu" wrote in message ... >> Is this any why that I can change all the user accounts passwords ...
      (microsoft.public.windows.server.sbs)
    • Re: Why 1103515245?
      ... Dave -Turner wrote: ... special properties :-) ... Which gives some assurance that it is correct and provides reasonable pseudo-random output. ...
      (sci.crypt)