cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1995-01-26 - Re: CERT statement

Header Data

From: Marc Horowitz <marc@cam.ov.com>
To: Thomas Grant Edwards <tedwards@src.umd.edu>
Message Hash: 30b1819b44cd8fe674029d4ed01a43eb5a8227504e25abbe1717c891e7060ed2
Message ID: <9501262142.AA07376@dun-dun-noodles.cam.ov.com>
Reply To: N/A
UTC Datetime: 1995-01-26 21:39:44 UTC
Raw Date: Thu, 26 Jan 95 13:39:44 PST

Raw message

From: Marc Horowitz <marc@cam.ov.com>
Date: Thu, 26 Jan 95 13:39:44 PST
To: Thomas Grant Edwards <tedwards@src.umd.edu>
Subject: Re: CERT statement
Message-ID: <9501262142.AA07376@dun-dun-noodles.cam.ov.com>
MIME-Version: 1.0
Content-Type: text/plain


>> What we need to concentrate on is secure systems that are not vulnerable 
>> to IP spoofing, as opposed to firewalls.

You're exactly right.  However, getting people to deploy real security
systems is nearly impossible.  My company sells a kerberos system, and
although everyone is saying they want security, nobody really
understands what this means, and as soon as we tell them that it
actually involves effort, they become far less interested.  Even
though I've seen companies get hosed because of lame security, the
people who matter aren't willing to commit.

I'm hoping that as firewalls begin to fall, that the CERT will stop
recommending half-assed solutions.  We'll have to wait and see.

		Marc

Thread