Recently on this list, there was a conversation about
Challenge-response, and the consensus seems to be that it's a pretty
bad idea, or at least badly implemented:
Sounds reasonable. Also mentioned once on this list, is Marcus
Ranum's list of "The Six Dumbest Ideas in Computer Security", #1
being "Default Permit":
This also sound reasonable to me. So my questions are:
1. Isn't Challenge-response a type of "Default Deny"? Isn't that a
good thing, if perhaps badly implemented?
and
2. Not directly related to Macs, my school has an upcoming meeting
with the makers of Savant Protection
http://www.savantprotection.com/, which is anti-malware software that
seems to use the "Default Deny" model. What do think of software like
this, in general? Good idea or bad?
Again, just looking for some security-minded opinions. Thanks!
Bret
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
