funsec mailing list archives

Re: Dangerous promises...


From: Valdis.Kletnieks () vt edu
Date: Thu, 12 Nov 2009 20:51:53 -0500

On Thu, 12 Nov 2009 17:12:12 EST, Alex Eckelberry said:

http://www.seekingmedia.com.au/news.php?newsid=857&g=-1

"Once a user has logged on to their computer, they are presented with two
operating zones.

Zone 1 has been configured for virus-free email and Internet surfing, allowing
users to download emails and attachments and to access any website without
accidentally downloading a virus or spyware.

Zone 2 uses a normal Windows interface and has been set up for software
programs that require either no Internet access, or only limited access to
download file updates and information.  It also contains a robust filtering
system for children that prevents them from accessing inappropriate online
content."

They've re-implemented the Biba model.

I can guarantee that their biggest holes will be at the junction of the
zones - how do you download a Word document from a friend and then open
it in {,Open}Office? "No read down" is gonna be a bitch. ;)

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: