From owner-freebsd-security Mon Sep 3 3:34:15 2001 Delivered-To: freebsd-security@freebsd.org Received: from elvis.mu.org (elvis.mu.org [216.33.66.196]) by hub.freebsd.org (Postfix) with ESMTP id 8F82237B405 for ; Mon, 3 Sep 2001 03:34:11 -0700 (PDT) Received: by elvis.mu.org (Postfix, from userid 1192) id 666C481D01; Mon, 3 Sep 2001 05:34:06 -0500 (CDT) Date: Mon, 3 Sep 2001 05:34:06 -0500 From: Alfred Perlstein To: "Nickolay A.Kritsky" Cc: "Carroll, D. (Danny)" , security@FreeBSD.ORG Subject: Re: Re[2]: Possible New Security Tool For FreeBSD, Need Your Help. Message-ID: <20010903053406.N81307@elvis.mu.org> References: <98829DC07ECECD47893074C4D525EFC3115698@citsnl007.europe.intranet> <110320834936.20010903142910@internethelp.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <110320834936.20010903142910@internethelp.ru>; from nkritsky@internethelp.ru on Mon, Sep 03, 2001 at 02:29:10PM +0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org * Nickolay A.Kritsky [010903 05:31] wrote: > Hello D., > > Monday, September 03, 2001, 12:17:20 PM, you wrote: > > CDD> Yeah but Obfuscation PLUS good security does not hurt, in fact it helps. > CDD> Just so long as you don't *rely* on it. > > Don't you think it is really _too_ complicated. While you have > firewalls, open key logins, IP based verification. Just Keep It > Simple. IMHO the more complicated it gets, the more chances you have, > that in one day all this "security improvements" will play against > you. There's also the chance that combining two security methods may weaken both or expose some sort of vulnerability in one or both methods. -- -Alfred Perlstein [alfred@freebsd.org] 'Instead of asking why a piece of software is using "1970s technology," start asking why software is ignoring 30 years of accumulated wisdom.' '"Java" developer, like "special" Olympics, right?' - Bill Paul To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message