Start new session...

[Ingo Klöcker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Saturday 12 October 2002 05:55, Oswald Buddenhagen wrote:
> On Sat, Oct 12, 2002 at 12:11:48AM +0200, Ingo Klöcker wrote:
> so we are back to only one simple (in terms of explaining it)
> problem: the user does not know/remember, that there is a session in
> the background.

And that's the problem which has to be solved by reminding the user of 
open background sessions when he tries to shut down the computer.

> > Yeah, right. So now let's add just another way to nuke other users,
> > not.  The ultimate goal should be to make it almost impossible to
> > nuke other users in any way and not to add more ways to do this.
>
> imagine you have 10 armed enemies in front of you. now another one
> with a somewhat bigger gun appears. sure, you're missing a really
> strong armor, but does it really help you if that one guy with the
> bigger gun stays away?

Yes. It reduces the chance of getting killed by at least 1/11 ~= 9% 
(provided all enemies aim equally good; and I didn't even take the 
bigger gun into account).

> yes, i added one more way to exploit a risky feature and we _still_
> have no protection. so what?

It would have been nice if you had made it as difficult as possible to 
exploit this risky feature in this new way.

Regards,
Ingo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE9p+n6GnR+RTDgudgRAjZyAKDVsx/22p1cm7QlnnZYUgocGeMMZgCfVOl6
fq7lH8uff4TvoKYbsDxeVTc=
=IYxN
-----END PGP SIGNATURE-----