how to get people to upgrade? (Re: The weak link? DNS)

Wed Mar 26 17:38:50 UTC 2003

CK> Date: Wed, 26 Mar 2003 11:59:02 -0500
CK> From: "Kuhtz, Christian"

CK> The way I see it, the issue isn't that there aren't enough
CK> notifications of BIND vulnerabilities.

Perhaps.  But how much is enough?  Current notification levels
certainly get a fair number of admins to upgrade.

CK> Administrator inertia is the root cause.  I don't see how an
CK> automatism such as the one described changes human behavior.
CK> And unless you change that inertia, no amount of
CK> notification, databases, registries, yada yada yada will make
CK> any difference.

Correct.  Human behavior won't change.  The pain must exceed the
inertia.

Sounds familiar.  Have we seen this before?

Outdated bogon filters... old software... spam... needless route
deaggregation... broken smurf filters... ingress/egress
filtering...

Anything relying on widespread human responsibility is foredoomed
to failure.

Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist at brics.com>
To: blacklist at brics.com
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist at brics.com>, or you are likely to
be blocked.