[PLUG] Time server broken...

AthlonRob AthlonRob at axpr.net
Mon Feb 16 14:23:01 UTC 2004


On Mon, 2004-02-16 at 13:53, Felix Lee wrote:

> that doesn't work in the digital world, because anything in the
> digital realm is perfectly reproducible (which is why people find
> it useful), and it's pass/fail.  a security mechanism is 100%
> reliable until a flaw is discovered, which makes it 0% reliable.

I think things aren't as hard-and-fast as that.

The code is very complex.  I can assure you, there *are* some IPTables
vulnerabilities out there.  There *are* some SSH vulnerabilities out
there.  There *are* some Postfix/inn/whatever else vulnerabilities out
there.  We just aren't aware of them yet because they haven't been
discovered.

Does this mean Windows was 100% reliable up until the first security
flaw was discovered?  I think not.  I think the OS was insecure before,
we just didn't realize it.

I wouldn't call any piece of software 100% secure.  It defies logic that
something could be 100% reliably secure one moment, then completely
insecure the next moment simply because of one individual gaining
knowledge.

Rob





More information about the PLUG mailing list