Re: ACM

[Gadi Evron <ge () linuxbox org>]

> Well nuff of the meaningless ranting and bullshit, i need food and
> caffeine.   Feel free to destroy my perception of reality and ego.

I really like it, but let's put a spin on it.

We allow the creation of guns, even though they are used for killing. 
Heck, why not keep them just for law enforcement? If everyone had a gun 
than everyone would be aware of the risks and defend themselves.

Okay, that might sound reasonable to some, let's move on.

How about A-bombs? Should we allow everybody to research and develop 
nuclear weapons? and why not? Such knowledge would give them the 
understanding they require to live in peace.

In other words - there is no FUSSP solution to anything, and everything 
can be mis-used.

Thing is, where do we draw the line?

One could argue that if we allowed open research and development of 
viruses.. or biological viruses, we would all be safer. Than again, 
maybe we would all be dead.

I don't have all the answers - non of us do. What I am sure of is that 
although studying nuclear physics might not be a bad thing, building an 
A-bomb is. Why? Because if you are not going to use it, why build it? If 
you are going to use it, you need to be stopped.

I may be over-stating these issues, but come on. I agree, security needs 
to be taught. I disagree - most virus developers out there are bad guys 
and are causing harm. They need to be stopped.

Let's distinguish between vulnerability research (which can be defensive 
and constructive) to virus creation which mostly can't.

We know the problems and can study them without improving the flu to 
become a killer epidemic, can't we now?

I hope more schools will start teaching security from the trenches.. and 
although researching viruses is not a bad thing, I do hope virus writers 
who release their creations by fault or incompetence will end up in jail.

        Gadi.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave