From owner-freebsd-security@FreeBSD.ORG  Mon Mar  2 13:10:06 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 20B671065672
	for <freebsd-security@freebsd.org>;
	Mon,  2 Mar 2009 13:10:06 +0000 (UTC) (envelope-from mail@maxlor.com)
Received: from mxout006.mail.hostpoint.ch (mxout006.mail.hostpoint.ch
	[217.26.49.185])
	by mx1.freebsd.org (Postfix) with ESMTP id C9E928FC15
	for <freebsd-security@freebsd.org>;
	Mon,  2 Mar 2009 13:10:05 +0000 (UTC) (envelope-from mail@maxlor.com)
Received: from [10.0.2.10] (helo=asmtp001.mail.hostpoint.ch)
	by mxout006.mail.hostpoint.ch with esmtp (Exim 4.69 (FreeBSD))
	(envelope-from <mail@maxlor.com>)
	id 1Le7uG-000Awz-8q; Mon, 02 Mar 2009 14:10:04 +0100
Received: from [82.136.101.181] (helo=maxlor.mine.nu)
	by asmtp001.mail.hostpoint.ch with esmtpa (Exim 4.69 (FreeBSD))
	(envelope-from <mail@maxlor.com>)
	id 1Le7uE-000MQ1-Nw; Mon, 02 Mar 2009 14:10:02 +0100
Received: from localhost (unknown [127.0.0.1])
	by maxlor.mine.nu (Postfix) with ESMTP id 5C4872E5F0;
	Mon,  2 Mar 2009 14:10:02 +0100 (CET)
X-Authenticated-Sender-Id: mail@maxlor.com
X-Virus-Scanned: amavisd-new at atlantis.intranet
Received: from maxlor.mine.nu ([127.0.0.1])
	by localhost (atlantis.intranet [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ekmvHPc9a635; Mon,  2 Mar 2009 14:10:02 +0100 (CET)
Received: from [192.168.10.159] (pub212004072186.fx-hfc.datazug.ch
	[212.4.72.186])
	by maxlor.mine.nu (Postfix) with ESMTPSA id F03C52E5E7;
	Mon,  2 Mar 2009 14:10:01 +0100 (CET)
From: Benjamin Lutz <mail@maxlor.com>
To: freebsd-security@freebsd.org
Date: Mon, 2 Mar 2009 14:09:59 +0100
User-Agent: KMail/1.9.9
References: <20090302021415.GU5602@noncombatant.org>
In-Reply-To: <20090302021415.GU5602@noncombatant.org>
X-Face: $Ov27?7*N,h60fIEfNJdb!m,@#4T/d;
	1hw|W0zvsHM(a$Yn6BYQ0^SEEXvi8>D`|V*F"=?utf-8?q?=5F+=0A=09R2?=@Aq>+mNb4`,'[[%z9v0Fa~]AD1}xQO3|>b.z&}l#R-_(P`?@Mz"kS;
	XC>Eti,i3>%@=?utf-8?q?g=3F=0A=094f?=,\c7|Ghwb&ky$b2PJ^\0b83NkLsFKv|smL/cI4UD%Tu8alAD
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200903021410.00093.mail@maxlor.com>
Cc: Chris Palmer <chris@noncombatant.org>
Subject: Re: OPIE considered insecure
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Mar 2009 13:10:06 -0000

On Monday 02 March 2009 03:14:15 Chris Palmer wrote:
> Why are people logging into their remote servers from
> assumed-untrustworthy clients at all?

Because the inconvience of not using whatever service or data the server is 
providing is considered greater than the security risk.

Cheers
Benjamin