Path: utzoo!utgpu!water!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!mailrus!ames!pasteur!ucbvax!CORY.BERKELEY.EDU!dillon From: dillon@CORY.BERKELEY.EDU (Matt Dillon) Newsgroups: comp.sys.amiga Subject: Re: The ultimate fix!!! Message-ID: <8810081911.AA17305@cory.Berkeley.EDU> Date: 8 Oct 88 19:11:50 GMT Sender: daemon@ucbvax.BERKELEY.EDU Lines: 25 karl@sugar.uu.net (Karl Lehenbauer) Writes: :Damage from a virus/trojan/etc could be significantly reduced on a Unix system :by running new programs from a special signon that doesn't own anything :important that could be lost. Excuse me, bullshit. I wish people would drop this "virus's can be stopped" crap, it just isn't possible. The whole thing can be characterized by a single statement: "Convenience Vs. Security" Understand the point? The more convenient one makes a system, the more security holes one puts in it. For example, search paths. Another example (UNIX): .rhosts, A third example: remote logins. If you start removing conveniences to give a machine more protection, users will stop using your machine. It is as simple as that. STOP TRYING to argue with those of us who provide 'examples', please. We are only showing the uninformed the tip of iceburg with such examples. In real-life, there are as many ways to write a virus as there are bytes of memory in your favorite machine. ** This is the end of my involvement with this line of discussion ** -Matt