FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] Mis-attribution - Re: How automate firewall tests

To: chris@blask.org, Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Subject: Re: [fw-wiz] Mis-attribution - Re: How automate firewall tests
From: Crispin Cowan <crispin@novell.com>
Date: Wed, 15 Nov 2006 12:11:10 -0800
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.icsalabs.com
In-reply-to: <858953.74077.qm@web33814.mail.mud.yahoo.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <858953.74077.qm@web33814.mail.mud.yahoo.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
User-agent: Thunderbird 1.5 (X11/20060317)
Chris Blask wrote:
>> Gotta love how Paul and Marcus have taken care of us over
>>     
> the years on the  list.  
>
> As Paul said in a side note, he's not a fan of socialism
> (neither am I).  I thanked him for letting me make my own
> mistakes, f***ing pisses me off when committees force
> security on me.
>   
So you're not a fan of mandatory access controls then? :)

I'm not in favor of paternalistic governments either, but there are
cases for mandatory controls:

    * The subjects can't be trusted to defend themselves
          o children need to be protected from themselves for at least
            10 years
    * The subjects are too valuable to be lost
          o VIPs are actually subject to orders from their bodyguard
            staff under emergency conditions
    * The subjects self-carelessness actually pollutes the space of
      those around them
          o drivers who won't wear seatbelts increase health insurance
            costs for the rest of us
          o vulnerable software can be used to corrupt the rest of the
            system; need application security policies (AppArmor)
          o careless users may disclose organizational secrets; need
            mandatory disclosure policy (MLS)
          o careless users may bring infection into the organization;
            need network access control (Cisco CSA)

My personal favorite paternalistic government issue: drugs. I want all
drugs legalized; the expense to society to try to control weed, heroin,
meth, etc. greatly exceed the damage caused by these substances. OTOH, I
want *strong* controls on antibiotics: idiots abusing antibiotics breed
antibiotic-resistant germs, which threaten all of us.

Caveat: my views on drug controls, and pretty much anything else, do not
reflect Novell's views.

Crispin

-- 
Crispin Cowan, Ph.D.                      http://crispincowan.com/~crispin/
Director of Software Engineering, Novell  http://novell.com
     Hack: adroit engineering solution to an unanticipated problem
     Hacker: one who is adroit at pounding round pegs into square holes


_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>