pmetzger @
lehman .
com (Perry E. Metzger) writes:
# [He continues in this vein, but eventually, our hero gives up,
# realizing that CERT is part of the problem, not the solution. All
# they've succeeded in doing is keeping him up at night. He can't fix
# his problem, since he doesn't know how. He has no idea if he has a
# problem. He can't check once he's done something to determine if he's
# fixed it. All he knows is that CERT has no proceedure for telling him
# anything regardless of who he is, period.]
No, Perry, they may not part of YOUR solution for THIS particular
problem, but CERT definitely provides an invaluable service.
Consider this: without the recent CERT advisory, would you have even
guessed that you _might_ have a problem? Hell, no, you would have
wandered blindly on, secure in the belief that "everything is OK".
Now, because of the CERT announcement, at least you know there _may_
be a problem with your configuration, and you can work on finding out
more information about the problem and finding a solution.
What you're saying is, in effect, "If they won't tell me all the
details, I'd rather they'd never told me about the possible problem in
the first place". Do you _really_ mean that? I hope not.
-Brent
--
Brent Chapman Great Circle Associates
Brent @
GreatCircle .
COM 1057 West Dana Street
+1 415 962 0841 Mountain View, CA 94041
Follow-Ups:
|
|
