cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1995-10-18 - Re: Postscript in Netscape

Header Data

From: Nesta Stubbs <nesta@cynico.com>
To: cypherpunks@toad.com
Message Hash: 84acf4476e88c12127ed084be7ad78561f839f2718edbc0a4df4655fb7c1a4de
Message ID: <Pine.BSD.3.91.951018083946.22548C-100000@miso.wwa.com>
Reply To: <9510181233.AA12939@all.net>
UTC Datetime: 1995-10-18 13:53:43 UTC
Raw Date: Wed, 18 Oct 95 06:53:43 PDT

Raw message

From: Nesta Stubbs <nesta@cynico.com>
Date: Wed, 18 Oct 95 06:53:43 PDT
To: cypherpunks@toad.com
Subject: Re: Postscript in Netscape
In-Reply-To: <9510181233.AA12939@all.net>
Message-ID: <Pine.BSD.3.91.951018083946.22548C-100000@miso.wwa.com>
MIME-Version: 1.0
Content-Type: text/plain


On Wed, 18 Oct 1995, Dr. Frederick B. Cohen wrote:

> Is it Netscape's position that when people call them on their statements
> they make irrelevant comments and inflamatory remarks toward legitimate
> researchers who are freely helping them understand the security issues
> they apparently don't understand?
> 
Jeff doesn't speak directly for Netscape, Doc.  Your previous suggestion 
didn't make much sense, the idea that a single peice of software must 
close ALL the holes across the board to be called "secure" is ludicrous.  
Granted it should cover all within it's domain, and provide safegaurds, 
but to expect Netscape to handle security problems that rightfully should 
be fixed in the TCP/IP protocol stack, or in the interprator for another 
language that happens to have a security hole and can be spawned off.  
Netscape does not come with a postscript app preset so the user has to 
make a conscious choice.  All postscript viewers I have used make mention 
of these security problems, and I would hope(tho do not for one second 
believe) that users read this warnings.  If they don't and set-up the 
browser to spawn off files of unknown origins, then they are taking their 
own risks and I do not think for one second netscape could be held 
responsible.  There is no defense against the dreaded DEU hole that 
exists on all systems.




Nesta Stubbs		     "Betsy, can you find the Pentagon for me? 
Cynico Network Consulting     It has five sides and a big parking lot" 
nesta@cynico.com			-Fred McMurray-

Thread