🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #242

Re: Warning: ShareSniffer Released

#242
From: John Navas
Date: Sun, 25 Feb 2001 15:13
62 lines
4577 bytes
[POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]

In <MPG.1502614f43a60eb798a00e@207.126.101.100>,
See_email_@ddress_below.This_one_is.invalid (Philip J. Koenig) wrote:

>In article <lpRl6.3966$S25.57007@typhoon.sonic.net>, 
>spamfilter@navasgrp.dublin.ca.us (John Navas) writes...
>> [POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]
>> 
>> On the contrary -- just as I applaud and welcome safe tires, I would
>> applaud and welcome safe computing.  Properly implemented, it would not
>> be limiting -- that's a common misconception.
>
>I more or less agree -- the problem of course is that from the
>perspective of the marketing people, security issues mustn't be 
>emphasized because of the fear that it will scare away potential
>buyers.  I'm convinced this has a lot to do with Microsoft's 
>attitude on security.

The flip side of security is safety, which sells in other fields (e.g.,
automobiles).  If that is the attitude, I think it's short-sighted.

>Much of the focus of Windows and IE revolves around coming
>up with features which either make the PC more TV-like/
>entertaining, or which optimize the ability for various
>entities to market to users. ...

Perhaps.  But I think it's also due in large part to ease of use
considerations, both to make features more accessible and to minimize
support costs, seasoned with a large dash of naivete (the downside of
depending so much on young turks that haven't learned the lessons of the
past).  To be fair, Microsoft is hardly alone in this regard.  Witness
the glaring security vulnerabilities recently found in WEP (Wired
Equivalent Privacy), a name that now sounds painfully naive, because
products were rushed to market without proper review of the standard.

>Therefore I'm not convinced (at least in Microsoft's case)
>that they will ever adopt the right attitude in this respect
>because to do so would be counterproductive from a marketing
>standpoint. (unless and until consumers start clamoring for
>it, which *could* happen sometime in the future.. maybe after
>a few high-profile people get hacked :-)

I would tend to agree.

>All that being said, I still think that if you choose to
>climb a rock, jump out of a plane, or scuba-dive, you should 
>be aware of the risks involved and how to mitigate them.  To 
>say it's "someone else's problem" is stretching the truth 
>just a bit.

I think it's more that people expect both industry and government to be
responsible by laying down basic rules of safe and civilized behavior,
so that real risks are minimized along with reasonable warnings of the
real risks that remain.  Hence the needs to get trained before sky
diving and certified before SCUBA diving.  I personally don't think
these are unreasonable expectations.

-- 
Best regards,
John Navas     <http://navasgrp.home.att.net/>
     CABLE MODEM/DSL GUIDE:  <http://Cable-DSL.home.att.net/>
Technical Details
Message-ID: <fi9m6.4019$S25.60049@typhoon.sonic.net>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!newsfeed.wirehub.nl!howland.erols.net!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mail
References: <3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov> <slrn99cu2l.djb.hal@localhost.localdomain> <4ald9tgo6bku8v49seqqgjk22064nqdetr@4ax.com> <976mhu$itt$1@news.panix.com> <zgBl6.3896$S25.55135@typhoon.sonic.net> <RPDl6.2610$IV6.161273@news1.news.adelphia.net> <lpRl6.3966$S25.57007@typhoon.sonic.net> <MPG.1502614f43a60eb798a00e@207.126.101.100>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-ArrivalTime: 2001-02-25 07:14:07 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!newsfeed.wirehub.nl!howland.erols.net!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mail
From: John Navas <spamfilter@navasgrp.dublin.ca.us>
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Subject: Re: Warning: ShareSniffer Released
Organization: The Navas Group, Dublin, CA, USA
References: <3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov> <slrn99cu2l.djb.hal@localhost.localdomain> <4ald9tgo6bku8v49seqqgjk22064nqdetr@4ax.com> <976mhu$itt$1@news.panix.com> <zgBl6.3896$S25.55135@typhoon.sonic.net> <RPDl6.2610$IV6.161273@news1.news.adelphia.net> <lpRl6.3966$S25.57007@typhoon.sonic.net> <MPG.1502614f43a60eb798a00e@207.126.101.100>
X-Newsreader: Forte Agent 1.8/32.548
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 62
Message-ID: <fi9m6.4019$S25.60049@typhoon.sonic.net>
Date: Sun, 25 Feb 2001 15:13:15 GMT
NNTP-Posting-Host: 209.204.185.87
X-Complaints-To: abuse@sonic.net
X-Trace: typhoon.sonic.net 983113995 209.204.185.87 (Sun, 25 Feb 2001 07:13:15 PST)
NNTP-Posting-Date: Sun, 25 Feb 2001 07:13:15 PST