Re: CIPE - Encrypted IP Encapsulation

[Manuel J. Galan]

> Another way of putting it is that we would have something that the
> commercial OSes can't provide outside the US - strong, high-quality
> crypto :-).
> 
> 
> astor
> 
> -- 
>  Alexander Kjeldaas, Guardian Networks AS, Trondheim, Norway
>  http://www.guardian.no/

I could not have chosen a better wording :-)

We are walking towards a new paradigm in OS development and we have to face
several important issues:

First we wanted to have our workstation/server, then we wanted all
them sharing resources inside a network, after we plugged our network into
the Internet and now we _need_ to secure our network from abuse!

Linux success has been enormous but now Linux faces the peril of death by its
very success: network exploits (www.rootshell.com, etc.) buffer overflow
exploits, etc. Let's face it: we fight a _neverending_ war...

At first Linux was a hacker's unixlike misterious OS (security through
obscurity...) but now it is _so popular_ that we are seeing virus-like kernel
modules, network exploit menu suites, etc. (after one d00z breaking a linux box
he issued a 'format c:' command!) There are exploits, sniffers, etc. for
Linux Dummies.

Right now there is a serious talk about integrating big database applications in
Linux. If we do not build the right tools to protect our Linux servers, they
will be relegated to the backyard and Linux will become just another toy OS for
computer freakies that _nearly_ succeeded.

Take a look around you at your Universities, ISP's etc. and become aware what
Linux is right now!

These are the drawbacks of success... :-(

----------------------------------
E-Mail: Manuel J. Galan <[e-mail]>
Date: 04-Aug-98
Time: 19:22:06

This message was sent by XFMail
---------------------------------