Firewall Wizards mailing list archives

Re[4]: FW-1: Questions about DHCP and IPX


From: ken_stephens () em fcnbd com
Date: Wed, 30 Sep 1998 11:06:49 -0600

     I share the same hope.  
     
     My main point was that we are all paid to do our work and not disclose 
     what our common sense and our managers "think" should remain 
     confidential.
     
     The appearance (or illusion) of good judgment is central to any 
     clearance or background check.  To lose your clearance and/or your job 
     because you said something in the heat of an argument on a mailing 
     list is a career event that is easily avoided.  What MIL unit and type 
     of firewall they had installed was never an important fact in the 
     discussion of how bad, good or widely used FW-1 is.
     
     
     Sidebar:   Does anyone know how many lines of code currently in FW-1?  
     Like the number of lines of code in NT 5.0 the question is an exercise 
     in trivial facts unless you study risk assessment by exponential code 
     growth. 
     
     
     Ken Stephens
     Network Security, FCNBD                    ken_stephens () em fcnbd com
     
     This statement is my own and does not reflect the opinion of my 
     employer!
     


______________________________ Reply Separator _________________________________

    I would seriously question whether the C.O. of the 88th would be happy 
    with your disclosure of what they use for a firewall.  You may have 
    kissed whatever clearance you had good-bye making that public 
     statement.  Let's be a little careful out here folks.
     
One would hope that people are being, however slowly, educated out of 
the obsolete "security through obscurity" model.

--
Joe Yao                                jsdy () cospo osis gov - Joseph S. D. Yao 
COSPO Computer Support                                                EMT-A/B 
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.
     



Current thread: