Re: [Asrg] An "ideal" false positive (TMGRS take 2)

[Rich Kulawiec <[e-mail]>]

On Fri, Jan 29, 2010 at 02:33:56PM +0000, Ian Eiloart wrote:
> So, does that mean that all computer mediated communication is pointless?

Of course not. But it does mean that anything originating on an
end-user system should never be used as an input to a security policy
mechanism, since The Bad Guys can either fabricate or block an
arbitrary number of such inputs as they see fit. [1]

---Rsk

[1] Within the constraint that they can only do so from those systems
which they control.  But given that the number of such systems is
already very large and still growing, and that there is no reason
at all to think that this trend will reverse or even slow down, this
constraint is not really very limiting in practice.