RE: Security urban legends

[dreamwvr <dreamwvr () dreamwvr com>]

hi Marcus,
> > but the one I like hearing is the backdoor in Firewall-1 since it is an
> > overseas product.  So far, I haven't seen anyone with evidence...
FWIW.. i recall that accusation and the resulting confusion and agree with
the below  the sectypes that knew anything all bowed out..;-) funny how
that works. since FW1 has announced that they will be porting over to linux 
http://www.informationweek.com/story/IWK19991105S0006
this could make things interesting although i seriously doubt that 
FW1 will become open source.. also IMHO they are going to have a difficult
time convincing linuxians to switch from ipchains/ipfwadm or whatever the 
next rev will be called which i can't remember to FW1. i could see them 
getting there management console open .. well maybe as many would rather 
run linux that i know than nt.. IMHO in security more often than not.. a case 
of.. "LESS is MORE" i often get stumped with for instance all the IDS
products 
which seem to be an area that many sec corps are focusing on these days..
which create the impression of a buyable comfort zone whereas it appears
since this generation of IDS is not really there yet it is a flawed model.
Marcus i am sure that you of all people see that by the time 'most' corp 
are finished polishing their product there is much ado about nothing. b.t.w.
noticed a great review of why choose NFR over xyz recently.. 
                                                        Regards,
                                                        dreamwvr () dreamwvr com
                                                

Reuters, London, February 29, 1998: 
Scientists have announced discovering a meteorite which will strike the 
earth in March, 2028.  Millions of UNIX coders expressed relief for being 
spared the UNIX epoch "crisis" of 2038.
_______________________________________________________________________

************** DREAMWVR.COM - TOTAL INTERNET SERVICES ****************
  TOTAL DESIGN - DEVELOPMENT - INTEGRATION - SECURITY - Click Here..
           <http://www.dreamwvr.com/services/MAX_SEC.html>
   DREAMWVR.COM - The Console of Many... 90 Topics Covered
<http://www.dreamwvr.com/dynamicduo.html> <mailto:dreamwvr () dreamwvr com>
->> LINUX-MANDRAKE Solution Provider and North American Distributor <<-
                        PRODUCT OF THE YEAR!
         <http://www.dreamwvr.com/mandrake/mandrake-main.html>
                       "===0 PGP Key Available  
*************** "As Unique as the Company You Keep." *****************
    "If anyone speaks from DREAMWVR.COM its certainly not me:-)"
________________________________________________________________________