Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Death to Old Software
Jon Lasser, 2002-04-03

We all know that outdated network software is security hazard. The solution: hard-wired expiration codes that self-destruct an old program when it's past its prime.

Comments Mode:
I don't like it. 2002-04-03
Anonymous
You are right. 2002-04-03
J. J. Horner
Death to Old Software 2002-04-03
Not Really Anonymous
Death to Old Software 2002-04-03
Reaten
Death to Old Software 2002-04-03
Steve (1 replies)
Death to Old Software 2002-04-03
Anonymous (1 replies)
I have a better solution 2002-04-04
A Debian User (1 replies)
I have a better solution 2002-04-11
Anonymous
Counting the cost 2002-04-03
Working poor
Death to Old Software 2002-04-03
Anonymous
Good idea 2002-04-03
Anonymous (1 replies)
Re: Good idea 2005-10-29
Anonymous
Death to Old Software 2002-04-03
Anonymous
Death to Old Software 2002-04-03
Paul Wouters
Death to Old Software 2002-04-03
CodePunk
a sane suggestion 2002-04-03
Anonymous
Very stupid, here's why 2002-04-03
Anonymous
What a horrible idea. 2002-04-03
Steve Briggs
Is it a bug or has it expired 2002-04-03
Anonymous
You have got to me kidding me. 2002-04-03
Anonymous
What about incompatibilities 2002-04-03
Anonymous
Death to Old Software 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Anonymous
Monumentally *BAD* Idea 2002-04-04
Arne Flones
If it aint broke don;t fix it 2002-04-04
Anonymous
other options? 2002-04-04
Mac guy
Moronic iin the extreme... 2002-04-04
Anonymous
Death to Old Software - What a Crock 2002-04-04
Paul Mauriks
Death to Old Software 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Chicken
Death to Old Software 2002-04-04
Anonymous
Death to Old Software... not in my organization 2002-04-04
Steven C. Buttgereit (sf@buttgereit.net)
Death to Old Software? 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Anonymous
A really, really stupid idea 2002-04-04
Anonymous
Death to Old Software, you NUTS 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Elf Qrin
Death to Old Software 2002-04-04
Anonymous
Interesting, but No. 2002-04-04
Chris Fairbairn
There are several problems with this approach:

1. How do you determine the time frame at the end of which the packages will expire? Release times differ from project to project and aren't always reliable.
2. This takes away some of the freedom of Open Source Software by attempting to tell users which software they should be using.
3. New Releases may introduce vulnerabilities of their own, do you really want to force users to potentially open up holes in their systems?
4. This would contribute to the idea that Open Source Software is hard to use and give certain proprietary software companies more ammunition ("Well you have to upgrade their software every 3 months" etc).

Interesting idea, but discretion in this area is best left in the hands of the administrator.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/72/11664#11664
Horrible Idea !!! 2002-04-04
Anonymous
Bad Idea! 2002-04-04
Anonymous
Death to Old Software 2002-04-04
Paul
Death to Old Software 2002-04-04
Anon.
A Deepness in the Sky 2002-04-05
Adrian Close <adrian@close.wattle.id.au>
Death to Old Software 2002-04-05
wwb
Death to Old Software 2002-04-06
Grant Bayley
DJB does it right 2002-04-07
Anonymous
Extremely bad idea: here's why... 2002-04-07
Anonymous
Death to Old Software 2002-04-08
Anonymous
Availability, mate... 2002-04-09
Anonymous
Death to Old Software 2002-04-11
Stephen
This already has a name! 2002-04-11
AnonymousG
Death to Old Software -- Not 2002-04-11
Anonymous
What we REALLY need... 2002-04-12
BAShMaster
Death to Old Software...HUH? 2002-04-12
Anonymous
Print an expiration message 2002-04-17
Computer Science Tory
Pathetic 2002-04-19
dw
Death to Old Software 2002-04-20
Anonymous
Death to Old Software 2002-04-20
Anonymous
Death to Old Software 2002-04-21
InterWN Labs <interwn@interwn.nl>
Death to Old Software 2002-04-22
Greg







 

Privacy Statement
Copyright 2008, SecurityFocus