[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: TortoiseSVN calling home?

From: Molle Bestefich <molle.bestefich_at_gmail.com>
Date: 2006-04-14 01:40:22 CEST

Alex Holst wrote:
> Quoting Molle Bestefich:
> > Which is why I use the firewall to disable phone home for any
> > applications that aren't polite enough to ask in the first place, not
> > just TSVN.
>
> You do understand that any applications you install and run can do
> whatever you can do, including manipulate your firewall ruleset, kill
> the firewall, etc?

Yes.
Although I do think that it's wildly inappropriate, the whole idea
that I trust any software I install enough to do whatever I can do.

I think that there should be multiple levels of trust, and my ideal
would be an easy way to administer that. Perhaps in some way where
you could collaborate with other people to painlessly find out if some
particular software could be trusted or not. Or something. I dunno.

> If you don't trust the *documented* version check, how can you trust the
> application not to subvert your firewall?

Because if it did subvert my firewall, then it would qualify as being
malware and my virus scanner would pick it up.

(I realize that there's a race condition there in that there's a small
opening between malware being released and antivirus vendors picking
it up, but unfortunately I can do nothing about that..)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Fri Apr 14 01:40:41 2006

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.