Mobile code security (was Re: rr style scanning of non-customers)

Mon Jun 16 15:19:35 UTC 2003

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
> Brandon Butterworth
> 
> Or they may be happy thinking their NOC is more 0day virus proof rather
> than hoping a 3rd party will update their scanner in time
> 
> Who'd want to risk the NOC falling to the same problem that's just
> taken out the network they're trying to fix?
> 
> brandon

A NOC or abuse desk that figuratively puts its hands over its eyes
by blocking a signficant subset of trouble reports is arguably as
useless as one that is hit by a virus.  The most clueful reports are
going to be the ones with some evidence attached or included.

I think the point was that there are some other alternatives between
the two opposing extremes of bouncing all email with text attachments
on the one hand and leaving yourself completely unprotected on the other.