Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Nov 1998 02:34:52 -0500 (EST)
From:      "Matthew N. Dodd" <winter@jurai.net>
To:        Dima Ruban <dima@best.net>
Cc:        "Jan B. Koum" <jkb@best.com>, peter.jeremy@auss2.alcatel.com.au, freebsd-security@FreeBSD.ORG
Subject:   Re: SSH vsprintf patch. (You've been warned Mr. Glass)
Message-ID:  <Pine.BSF.4.02.9811020233260.17054-100000@sasami.jurai.net>
In-Reply-To: <199811020647.WAA25893@burka.rdy.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 1 Nov 1998, Dima Ruban wrote:
> Let me ask you this. Would you trust a packet that came from
> non-priviledged port and which wants to do something that even
> remotely should be secure?

The concept of 'secure port' is somewhat dated in this age of NT and Linux
lusers.

The bar for entry onto the net is quite a bit lower than it was 10 years
ago.

Trusting a 'secure port' is a good way to let someone else shoot you in
the foot.

-- 
| Matthew N. Dodd  | 78 280Z | 75 164E | 84 245DL | FreeBSD/NetBSD/Sprite/VMS |
| winter@jurai.net |      This Space For Rent     | ix86,sparc,m68k,pmax,vax  |
| http://www.jurai.net/~winter | Are you k-rad elite enough for my webpage?   |


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.02.9811020233260.17054-100000>