Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Jul 1998 18:41:44 -0500
From:      Jon Hamilton <hamilton@pobox.com>
To:        "Matthew N. Dodd" <winter@jurai.net>
Cc:        security@FreeBSD.ORG
Subject:   Re: Why is there no info on the QPOPPER hack? 
Message-ID:  <199807202340.QAA17702@hub.freebsd.org>
In-Reply-To: Your message of "Mon, 20 Jul 1998 17:40:35 EDT." <Pine.BSF.3.96.980720173840.10970g-100000@sasami.jurai.net> 

next in thread | previous in thread | raw e-mail | index | archive | help

In message <Pine.BSF.3.96.980720173840.10970g-100000@sasami.jurai.net>, "Matthe
w N. Dodd" wrote:
} 
} This sort of thing tends to go over poorly at security audits and with
} people who's heads are on the line when things break.
} 
} I'm not willing to trust a 3rd party with that level of control of my
} system.  

Right.

} Nobody should be that trusting.

Wrong.  Not everybody's environment looks like yours; there are undoubtedly
people for whom this would be a very good idea.  

} Just think of what would happen if the update process was compromised.

That's less catastrophic some places than others.

-- 
   Jon Hamilton  
   hamilton@pobox.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807202340.QAA17702>