Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Date:	Tue, 22 May 2001 10:17:15 +0400
From:	egor duda <deo AT logos-m DOT ru>
X-Mailer:	The Bat! (v1.45) Personal
Reply-To:	egor duda <cygwin AT cygwin DOT com>
Organization:	deo
X-Priority:	3 (Normal)
Message-ID:	<57492627891.20010522101715@logos-m.ru>
To:	cygwin AT cygwin DOT com
Subject:	Re: The security of OpenSSH with cygwin.
In-reply-To:	<20010521200912.D17520@redhat.com>
References:
	<EA18B9FA0FE4194AA2B4CDB91F73C0EF08EFED AT itdomain002 DOT itdomain DOT net DOT au>
	<20010521200912 DOT D17520 AT redhat DOT com>
Mime-Version:	1.0

Hi!

Tuesday, 22 May, 2001 Christopher Faylor cgf AT redhat DOT com wrote:

CF> Right.  I cannot emphasize strongly enough that Cygwin is NOT A SECURE
CF> ENVIRONMENT.  Do NOT trust it with sensitive data.  It is trivially
CF> easy to hack.

and more to say, quite substantial *architectural* changes are
required to make it secure. cygwin does move in direction to be more
secure, but it's surely not a short way to go.

Egor.            mailto:deo AT logos-m DOT ru ICQ 5165414 FidoNet 2:5020/496.19



--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple

- Raw text -