[asterisk-users] Asterisk 1.6

[Michelle Dupuis]

What you are saying is only open source software is safe?  You have just excluded most software in use in the business world.

We have installed Norton antivirus on all of our workstation; I don't think Symantec will ever release the source code (since that would also show attackers how to get around it).  Using the same logic releasing SecAst source would also seem foolish (and make it impossible for any commercial enterprise to sell software).

I understand your point of view, and if your preference is to only use open source software that's great.  However, that doesn't mean precompiled software is inherently dangerous or malevolent. 

-=Michelle=-
________________________________________
From: asterisk-users-bounces at lists.digium.com <asterisk-users-bounces at lists.digium.com> on behalf of A J Stiles <asterisk_list at earthshod.co.uk>
Sent: Friday, April 4, 2014 10:38 AM
To: Asterisk Users List
Subject: Re: [asterisk-users] Asterisk 1.6

On Friday 04 Apr 2014, Michelle Dupuis wrote:
> Take a look a SecAst from www.generationd.com<http://www.generationd.com/>
>
> It does everything fail2ban does and more, including blocking users by
> geography (we exclude all of Asia and Africa), detection of break-in
> patterns (even if someone guessed your un/pw), detect changes in dial
> rates, etc.
>
> Grab the free version - its a BIG step up from fail2ban.

That link points towards a precompiled binary, which could have literally
*anything* lurking in it.  I politely advise you to back away slowly, and
break into a run when you think you are out of sight.

Precompiled binaries without Source Code should be treated like a bottle of
glowing green liquid labelled "drink me", or an offer to come and look at some
puppies.  No reputable software supplier would object to showing you what is
on the inside.

--
AJS

Note:  Originating address only accepts e-mail from list!  If replying off-
list, change address to asterisk1list at earthshod dot co dot uk .

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users