funsec mailing list archives

Re: Kaspersky strikes again


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Sat, 22 Dec 2007 12:47:56 -0500

On Dec 21, 2007 7:16 PM, Drsolly <drsollyp () drsolly com> wrote:
On Fri, 21 Dec 2007, Larry Seltzer wrote:

Even so, there would be so much less testing to do, wouldn't there?
After all, on an appliance users can't just arbitrarily install
applications (not and expect support).

A signature system uses a single common database across all its
incarnations. If you leave out some sigs on gateway appliances, users will
scream when they find out. So, the testing of the database is common
across all platforms.

Would you be willing to have a gateway that, by design, allows Huhk-C
to get through?

How tough is it for a large company to have 50 or so "clean"
workstations, packed with applications

-JP
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: