[cap-talk] Horton vs. ACLs - private namespaces and theAuditProblem

[Karp, Alan H]

MarkM wrote:
> 
> How happy would auditors and regulators be if the answer on a given
> system were always a non-definitive "no"? This can easily happen for
> entirely innocent reasons.
> 
Not all that happy, but happier than if there wasn't the possibility of
a definitive "yes".  Smart crooks cover their tracks; we catch the ones
who aren't that smart.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp