First Let it be known that: I, Jerry Westrick, have in no way intended
to slur or impinge on the reputation of the honorable
people at Hamachi.  If some feel I have done so I hear by
express my apoligies to Hamachi, and state unequivocally
that this was not and is not my intention.  As far as I know 
the people at Hamachi are kind people trying to help the world
for free, and should be applauded!

Now that I've cleared the air, 8-)

I'm back to my complaint which I seamed to have so badly explained.
This time I'll take a little more time to explain a little better.

The company I work for writes software that connects electronic stock 
exchanges to Banks.  We support some 15 banks.  We use remote access 
constantly everyday.  If we where not able to do so, we could not exist as a 
viable company.

Our clients, the Banks, have obvious need to ASSURE that thier customer 
information is not accessable in anyway.  They have extended thier trust to 
include the company I work for.  This they did only did after studying our 
security practices.  

So now that you know where I'm coming from, maybe you can understand the 
following comments better.

We cannot use a mediation server, to give us IP addresses.  To do so
would mean trusting:
1) The people at Himachi, which we obviously cannot do.. (No insult or slur is 
intended, but with the security of Banking information at risk, the rule to 
follow is DO NOT TRUST ANYONE!)
and 2) the security practices of the people supporting that server (in this 
case Himachi).  We (my company) do not know enough about thier security 
practices to make an informed opinion. 
and lastly, 3) Trusting everyone that the people at Himach place thier trust 
in.


So this is what I meant by not being able to put the concept of "Secure" and 
"Trust" together under a single hat.

Now, not everyone needs this kind of security,
so there may be a valid need/use for the services you are so kindly
offering the community.  But let us inform the people of the level of security 
and/or risks that they are accepting, as most people cannot judge this for 
themselves...

Once Again, I do NOT believe that the people at HIMACHI are trying to do 
anything evil/bad/nasty.  Infact, I applaud them for offering thier work and  
services to the community, and hope that the community will appreceate thier 
efforts as much as I do.

Jerry
P.S.  Your assumption that I was a "Closed software hatter" is also wrong 8-)



















 

On Thursday 03 March 2005 18:53, Zach Dennis wrote:
> Alex Pankratov wrote:
> > Jerry,
> >
> > We are NOT paying lots of money as we do NOT relay your
> > traffic. It is p2p system, the bandwidth usage for us is
> > under few megs a day. Can you fit this together under one hat ?
>
> Alex,
>
> No need for the tone of your last sentence. I grasp what you are doing
> as I am sure many others are. I even see it's benefit, but I'll agree
> with Jerry, that using an outside initiation or mediation server is a
> little questionable. Nothing is free, and you can't assume people to be
> so trustworthy just because you say so. None of us know you, so we are
> allowed to have questions and to put what you say and do under
> speculation, especially with Hamachi's functionality.
>
> Is the the mediation server software available for download? This would
> answer alot of questions I think it if someone could put that on their
> server. Then a corporation, home user, small office, etc... would know
> where information is going.
>
> If it isn't available publicly, perhaps this would be for the next
> version of Hamachi, the server code as well? Your software, so your call...
>
> Zach
> _______________________________________________
> VNC-List mailing list
> [email protected]
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
[email protected]
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to