* Jim Preston wrote:
   > To me this is an oxymoron "vital task" + "set and forget" Set and forget
> solutions are for NON-VITAL tasks by the very statement of 'forget'.
> 

Your opinion, which you are entitled to.
I'll agree to disagree with you.
:-)

> it is up to THEM to ensure changes to the project do not
> cause them undue hardship. 

Agreed.
Currently the project is experiencing some growing pains.  However I think
everyone will get through OK.

> It is NOT the projects responsibility to
> protect users from themselves. 

A fair percentage of the reason for AV existence is precisely to protect users
from themselves.  Even smart users occasionally do dumb things.
:-)

> The projects responsibility is to enhance the projects in ways THEY see fit.
> 

And they do a great job there.
Relations with the user base is where it gets a bit rough.

> 
> PS: Thanks for not letting this thread RIP
> 
No rest for the wicked, or sysadmins either.
:-)

I understand what the ClamAV Team did & why.
I agree with the what and why, but never with the how..

If they didn't release a kill sig, when they released a 980 byte sig, the old
installs would quit getting incremental updates. Then they'd pull full updates
and knock the entire ClamAV update infrastructure over.

Here is what I absolutely do not like about this or agree with.

The very possibility of there being a kill sig.  One specially crafted sig
could kill the virus protection on every server & workstation in our company.

Allowing the ClamAV Team to remotely nuke a level of our defenses is not
acceptable.  ( ClamAV Team, correct me if I've got this wrong. )

Obviously, we are betting the farm on solutions provided by these guys.
However, the level of the farm's protection is my responsibility not theirs.
With the public demo of a kill sig capability, I learn that they CAN & WILL
mess with something that is my responsibility.

Tactically my "kingdom" could be invaded by the ClamAV Team at any time, &
they have already invaded others.

That is a concept that I will never agree with.

-- 
Sincerely,

Nathan Gibbs

Systems Administrator
Christ Media
http://www.cmpublishers.com


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to