RE: Viruses

[allbery ece cmu edu]

On  6 Jul, Roger Vaughn wrote:
+-----
| It's an interesting idea, but in practice it isn't enough.  This same
+--->8

"it isn't enough" isn't a reason *not* to do it; it does reduce the
magnitude of the problem.  It can't be completely eliminated without
implementing e.g. signed executables --- and even that only prevents
"piggybacking"; a signed malware executable is still possible, and the
signature won't do you a whole lot of good (it might have been signed 
with a one-use bogus private key, which can't be traced once the
private key has been wiped).

-- 
brandon s. allbery	[os/2][linux][solaris][japh]	 allbery@kf8nh.apk.net
system administrator	     [WAY too many hats]	   allbery@ece.cmu.edu
electrical and computer engineering					 KF8NH
carnegie mellon university	  ["better check the oblivious first" -ke6sls]