RE: [fw-wiz] Sources for Extranet Designs?

From: Marcus J. Ranum (mjr_at_ranum.com)
Date: 02/23/04

  • Next message: Marcus J. Ranum: "RE: [fw-wiz] Sources for Extranet Designs?" 
    To: Frederick M Avolio <fred@avolio.com>, "Wes Noonan" <mailinglists@wjnconsulting.com>, "'Baumann, Sean C.'" <Sean.Baumann@celera.com>, "'R. DuFresne'" <dufresne@sysinfo.com>
Date: Mon, 23 Feb 2004 17:27:23 -0500

    Frederick M Avolio wrote:
    >No. He said, "Security is like onions, it makes your eyes burn and leaves you burping."

    Actually, the Onion remark was one of Steve Bellovin's. ;)

    *MINE* was at SANS in 1997 in Baltimore:
    "I guess we should all just quit doing security and become
    plumbers.
    No.
    Wait.
    Security *IS* like being a plumber!! You still have to worry
    about the flow of stuff and the thickness of your pipes. You have
    no control over the stuff you're going to have to deal with,
    and it all stinks about equally. Marketing people put whatever stuff
    they like into your pipes, and when the pipes burst you're
    still left to clean the stuff up and your customers are going to
    blame you for what they flushed."

    mjr.

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Marcus J. Ranum: "RE: [fw-wiz] Sources for Extranet Designs?"

    Relevant Pages

    • Re: Dripping wet
      ... >> all the pipes and toilets freeze and the plumbers make a fortune. ... Not all the pipes freeze you know. ... Meanwhile water is streaming down the walls! ...
      (soc.culture.scottish)
    • Re: Dripping wet
      ... >>> all the pipes and toilets freeze and the plumbers make a fortune. ... Not all the pipes freeze you know. ... The regulations say that every house has to have a stop cock. ...
      (soc.culture.scottish)
    • Re: Were all in the wrong business.
      ... I've called three plumbers who live within 5-10 minutes of my home. ... He usually charges me $50 to $100 plus materials for a simple job, such as adding service to a privacy wall in my basement. ... I have a thing for shiny, new pipes, and knowing I won't have to spend a day dealing with a flooded basement, which would probably be the result of my own soldering adventures. ... In my previous house, there was a problem with the water heater, covered by the manufacturer due to a class action suit. ...
      (rec.boats)
    • Re: Were all in the wrong business.
      ... side of the wall, there's an access panel that was designed in heaven. ... You can reach right up from the basement, ... I've called three plumbers who live within 5-10 minutes of my home. ... shiny, new pipes, and knowing I won't have to spend a day dealing with a ...
      (rec.boats)
    • Re: Redirected stdin/out and security
      ... > descriptor is assigned to pipes it inherits as stdin/out? ... the pipe is assigned the default security ... descriptor of the calling process. ...
      (microsoft.public.win32.programmer.kernel)