Full Disclosure mailing list archives

Counseling not to use Windows (was Re: Ano


From: full-disclosure () lists netsys com (Ron DuFresne)
Date: Sun, 14 Jul 2002 19:23:02 -0500 (CDT)

On Mon, 15 Jul 2002, Nick FitzGerald wrote:

        [SNIP]

Telling such people to drop
their carefully chosen or enforced environment means you are more
likely to be ignored as being "out of touch" or some such.

That does not mean it is necessarily a waste of breath to advise a
paying customer, but doing it among a group of security aware
professional peers is likely to make one look bigoted and thus more
likely to get you ignored.


        [SNIP]

Hmmmm, Does it not make those that do not wish to listen the fewls, being
there have been warnings and issues with the tools on their desktops and
at their fingertips since some of these lists began and prior.  Issues
that are "fixed and patched" again and again, and the same warnings have
been issued about actieX and java within those tools for how long now?

Again, if folks have to play in insecure settings on the corp backbone,
then perhaps they need to find alternative ways to play in some of these
lists.  I can't count the times that windows users on the vuln-dev list
have been infected with exploit code published there, and then whined
about it!  <chuckle>  Even after warnings by BB that it was what the list
was for.  People need to take some of the responsibility for their own
security upon themselves, IRL and online...

Thanks,


Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.



Current thread: