Re: Altavista Free Internet Security

Subject: Re: Altavista Free Internet Security
From: Bill (london222NETZERO.NET)
Date: Mon Jan 17 2000 - 16:28:19 CST

• Next message: Microsoft Product Security: "Microsoft Security Bulletin (MS00-005)"
• Previous message: Darren Reed: "Re: XML in IE 5.0"
• In reply to: Plex Inphiniti: "Altavista Free Internet Security"
• Next in thread: Mike Frantzen: "Trusted process on an untrusted machine?"
• Next in thread: Firstname Lastname: "Re: Altavista Free Internet Security"
• Reply: Bill: "Re: Altavista Free Internet Security"
• Reply: Mike Frantzen: "Trusted process on an untrusted machine?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

You can't run a trusted client on an untrusted machine.
A hostile user has complete access to the machine state, including
memory, stack, and register values. He/she can log all communication
between the client and the server and create a fake client that
duplicates the "authentification" procedure of the real client, but
without displaying ads.

It's a lost cause, but luckily for the people running the free
Internet access programs, most users won't do this.

__________________________________________
NetZero - Defenders of the Free World
Get your FREE Internet Access and Email at
http://www.netzero.net/download/index.html

• Next message: Microsoft Product Security: "Microsoft Security Bulletin (MS00-005)"
• Previous message: Darren Reed: "Re: XML in IE 5.0"
• In reply to: Plex Inphiniti: "Altavista Free Internet Security"
• Next in thread: Mike Frantzen: "Trusted process on an untrusted machine?"
• Next in thread: Firstname Lastname: "Re: Altavista Free Internet Security"
• Reply: Bill: "Re: Altavista Free Internet Security"
• Reply: Mike Frantzen: "Trusted process on an untrusted machine?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Tue Jan 18 2000 - 10:55:09 CST