Re: Searching for a quote

2015-03-15 Thread Dave Crocker
On 3/12/2015 5:24 PM, Tom Paseka wrote: > Be conservative in what you send, be liberal in what you accept > > ^http://en.wikipedia.org/wiki/Robustness_principle As with all terse summaries, the meaning of this is easy to distort. In the unfortunately not-so-uncommon extreme, it is used to argue f

Re: Searching for a quote

2015-03-15 Thread Matthew Petach
On Thu, Mar 12, 2015 at 6:34 PM, manning bill wrote: > it is true that the risk profile has changed in the last 30 years. > his core belief in interconnecting things in an open way, enabling > _anyone_ to create,build, and deploy > is the core of ISOCs “permission less innovation” thrust. > I h

Re: Searching for a quote

2015-03-14 Thread Larry Sheldon
On 3/13/2015 08:47, Karl Auer wrote: On Fri, 2015-03-13 at 06:14 -0700, Stephen Satchell wrote: what I was taught is that one has to be able to handle *correctly* malformed input, and not yield astonishing results. "No program should leave its sanity at the mercy of its input". PJ Plauger, I t

Re: Searching for a quote

2015-03-13 Thread Karl Auer
On Fri, 2015-03-13 at 06:14 -0700, Stephen Satchell wrote: > what I was taught is that one has to be > able to handle *correctly* malformed input, and not yield astonishing > results. "No program should leave its sanity at the mercy of its input". PJ Plauger, I think. Regards, K. -- ~~~

Re: Searching for a quote

2015-03-13 Thread Stephen Satchell
On 03/12/2015 10:25 PM, Keith Medcalf wrote: > Robustness is desirable from a security perspective. Failure to be > liberal in what you accept and not being prepared to deal with > malformed input leads to such wonders as the Microsoft bug that led > to unexpected/malformed IP datagrams mishandled

Re: Searching for a quote

2015-03-13 Thread Michael Thomas
On 03/12/2015 11:52 PM, Eygene Ryabinkin wrote: Thu, Mar 12, 2015 at 05:31:54PM -0700, Michael Thomas wrote: Jon Postel. I'm told that it is out of favor these days in protocol-land, from a security standpoint if nothing else. The principle has nothing to do with security: it doesn't mean "acce

RE: Searching for a quote

2015-03-12 Thread Keith Medcalf
everything works but no one knows why. Sometimes theory and practice are combined: nothing works and no one knows why. >-Original Message- >From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Michael Thomas >Sent: Thursday, 12 March, 2015 18:32 >To: nanog@nanog.org >S

Re: Searching for a quote

2015-03-12 Thread Rich Kulawiec
On Thu, Mar 12, 2015 at 05:33:19PM -0700, Dave Taht wrote: > Had he lived, email and netnews would have remained usable by mere > mortals and met the challenge of extreme growth and abuse. And ICANN, > and for that netsol, wouldn't have become the ugly morass they became. > Hell, even the IETF migh

Re: Searching for a quote

2015-03-12 Thread manning bill
it is true that the risk profile has changed in the last 30 years. his core belief in interconnecting things in an open way, enabling _anyone_ to create,build, and deploy is the core of ISOCs “permission less innovation” thrust. crypto/security folks are green with envy … it is somewhat “sour gr

Re: Searching for a quote

2015-03-12 Thread Patrick W. Gilmore
On Mar 12, 2015, at 20:44 , Larry Sheldon wrote: > On 3/12/2015 19:20, Jason Iannone wrote: >> There was once a fairly common saying attributed to an early >> networking pioneer that went something like, "be generous in what you >> accept, and send only the stuff that should be sent." Does anyon

Re: Searching for a quote

2015-03-12 Thread Larry Sheldon
On 3/12/2015 19:20, Jason Iannone wrote: There was once a fairly common saying attributed to an early networking pioneer that went something like, "be generous in what you accept, and send only the stuff that should be sent." Does anyone know what I'm talking about or who said it? Postel's L

Re: Searching for a quote

2015-03-12 Thread Jason Iannone
Low hanging fruit. On Thu, Mar 12, 2015 at 6:29 PM, Miles Fidelman wrote: > That was quick. :-) > > > Tom Paseka wrote: >> >> Be conservative in what you send, be liberal in what you accept >> >> ^http://en.wikipedia.org/wiki/Robustness_principle >> >> On Thu, Mar 12, 2015 at 5:20 PM, Jason Ianno

Re: Searching for a quote

2015-03-12 Thread Barney Wolff
I feel required to point out that Postel's Law was sage advice for its time, but should now be amended with "but assume that all input is hostile." On Thu, Mar 12, 2015 at 08:28:22PM -0400, Tim Durack wrote: > http://en.wikipedia.org/wiki/Jon_Postel > > Postel's Law > Perhaps his most famous lega

Re: Searching for a quote

2015-03-12 Thread Dave Taht
On Thu, Mar 12, 2015 at 5:27 PM, Dave Taht wrote: > jon postel. http://en.wikipedia.org/wiki/Jon_Postel Had he lived, email and netnews would have remained usable by mere mortals and met the challenge of extreme growth and abuse. And ICANN, and for that netsol, wouldn't have become the ugly moras

Re: Searching for a quote

2015-03-12 Thread Ted Cooper
On 13/03/15 10:20, Jason Iannone wrote: > There was once a fairly common saying attributed to an early > networking pioneer that went something like, "be generous in what you > accept, and send only the stuff that should be sent." Does anyone > know what I'm talking about or who said it? > Jon P

Re: Searching for a quote

2015-03-12 Thread Jason Iannone
Thanks all. On Thu, Mar 12, 2015 at 6:28 PM, Tim Durack wrote: > http://en.wikipedia.org/wiki/Jon_Postel > > Postel's Law > Perhaps his most famous legacy is from RFC 760, which includes a Robustness > Principle which is often labeled Postel's Law: "an implementation should be > conservative in i

Re: Searching for a quote

2015-03-12 Thread Michael Thomas
Jon Postel. I'm told that it is out of favor these days in protocol-land, from a security standpoint if nothing else. Mike On 3/12/15 5:24 PM, Tom Paseka wrote: Be conservative in what you send, be liberal in what you accept ^http://en.wikipedia.org/wiki/Robustness_principle On Thu, Mar 12, 2

Re: Searching for a quote

2015-03-12 Thread Miles Fidelman
That was quick. :-) Tom Paseka wrote: Be conservative in what you send, be liberal in what you accept ^http://en.wikipedia.org/wiki/Robustness_principle On Thu, Mar 12, 2015 at 5:20 PM, Jason Iannone wrote: There was once a fairly common saying attributed to an early networking pioneer that

Re: Searching for a quote

2015-03-12 Thread Tim Durack
http://en.wikipedia.org/wiki/Jon_Postel Postel's Law Perhaps his most famous legacy is from RFC 760, which includes a Robustness Principle which is often labeled Postel's Law: "an implementation should be conservative in its sending behavior, and liberal in its receiving behavior" (reworded in RFC

Re: Searching for a quote

2015-03-12 Thread Dave Taht
jon postel. http://en.wikipedia.org/wiki/Jon_Postel On Thu, Mar 12, 2015 at 5:20 PM, Jason Iannone wrote: > There was once a fairly common saying attributed to an early > networking pioneer that went something like, "be generous in what you > accept, and send only the stuff that should be sent."

Re: Searching for a quote

2015-03-12 Thread Tom Paseka
Be conservative in what you send, be liberal in what you accept ^http://en.wikipedia.org/wiki/Robustness_principle On Thu, Mar 12, 2015 at 5:20 PM, Jason Iannone wrote: > There was once a fairly common saying attributed to an early > networking pioneer that went something like, "be generous in