Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Jul 1998 09:33:15 +0100 (BST)
From:      Jay Tribick <netadmin@fastnet.co.uk>
To:        John Fieber <jfieber@indiana.edu>
Cc:        Brett Glass <brett@lariat.org>, security@FreeBSD.ORG
Subject:   Re: Projects to improve security (related to C) 
Message-ID:  <Pine.BSF.3.96.980722093203.1949L-100000@bofh.fast.net.uk>
In-Reply-To: <Pine.BSF.3.96.980721235902.25546M-100000@fallout.campusview.indiana.edu>

next in thread | previous in thread | raw e-mail | index | archive | help

| > be some positive decisions made and action taken. Clearly, we've
| > seen some problems that need fixing; the worst thing that can happen
| > is that people will do nothing. Constructive suggestions?
| 
| If you want an automagic patching system and you think it will
| be a "marketable" product, the standard next step is to build a
| proof-of-concept prototype for some marketing tests.
| 
| It seems such a system would need three componets.
| 
|   * A mechanism for manufacturing and packaging and labeling band-aids[1]
|   * A band-aid delivery service
|   * A mechanism for safely applying the band-aids
| 
| I personally think the scheme would be most marketable if the
| last stage had a "let me look at it first" mode in addition to an
| automagic mode.

I agree with this, I also think we should have versions that are
a full source code distribution of the patch - in case we can't
apply it cleanly over existing source or if we've 'hacked' at
our the source already.

Regards,

Jay Tribick
--
[| Network Administrator | FastNet International | http://fast.net.uk/ |]
[|        Finger netadmin@fastnet.co.uk for contact information        |]
[| T: +44 (0)1273 677633 F: +44 (0)1273 621631 e: netadmin@fast.net.uk |]



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980722093203.1949L-100000>