Re: [Full-disclosure] Securing our computers?
- From: Pavel Labushev <p.labushev@xxxxxxxxx>
- Date: Tue, 04 Nov 2008 05:07:17 +0700
mcwidget ?????:
What we *don't* know how to do is make a system that Joe Sixpack is
allowed
to screw around with, and yet prevent security issues from happening.
It's not a user's fault that C-like languages' runtime is vulnerable by
design. And it's certainly not a user's fault that C-like languages are
being widely used.
It's not a user's fault that most of widely used hardware platforms and
OSes are lacking of any advanced secure task isolation. And it's
certainly not a user's fault that the currently available isolation
functionality is being misused and overestimated everywhere.
It's not a user's fault that most of widely used software, including
OSes, and protocols has been designed and implemented mostly without
security in mind.
It's mostly the industry's fault. And the industry earns much from it.
I wouldn't blame users, because they are a minor evil in this story.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- References:
- [Full-disclosure] Securing our computers?
- From: n3td3v
- Re: [Full-disclosure] Securing our computers?
- From: Valdis . Kletnieks
- Re: [Full-disclosure] Securing our computers?
- From: mcwidget
- [Full-disclosure] Securing our computers?
- Prev by Date: Re: [Full-disclosure] Securing our computers?
- Next by Date: Re: [Full-disclosure] Fwd: 0day auctions, should they be outlawed?
- Previous by thread: Re: [Full-disclosure] Securing our computers?
- Next by thread: Re: [Full-disclosure] Securing our computers?
- Index(es):
Relevant Pages
|
