[Insight-developers] gdcmUtil.cxx polling for a MAC Address

Stephen Aylward Stephen.Aylward at Kitware.com
Thu Apr 10 09:25:42 EDT 2008


On Thu, Apr 10, 2008 at 9:08 AM, Mathieu Malaterre
<mathieu.malaterre at gmail.com> wrote:
>  > This is of concern because asking for something like a mac address may be
>  > considered a security risk by our customer...
>
>  I will not entered to much in the subject, but they are using open
>  source software after all ;-P
>  And as a side note, there is a much much easier solution to avoid this
>  'security risk', and it's called mac address spoofing.

Hi - just to clarify - for certain software delivered to the DOD, they
will run it on a test machine before running it on their secure
computers.   If they notice any "odd" behavior on the test machine,
they will not approve the software for installation on their secure
machines.   Note that they do not look at source code; they just
monitor the software's activity (I know few details about what this
exactly means).    Well, not surprisingly, it causes red flags to have
a visualization program, that we said did not use the network, to
spontaneously post an error message about a MAC address not being
found because of no active internet card.   While we know it isn't a
security risk, it is easy to see how other folks could perceive this
as "suspicious."

It would be great if we could have a developer optionally specify a
key via cmake instead of always using the MAC address.   If no key is
given, then it would be ok to fall back to the MAC address.  If a key
is given, then no MAC address is requested.

Thanks,
Stephen
>
>  HTH
>  --
>  Mathieu
>
>
> _______________________________________________
>  Insight-developers mailing list
>  Insight-developers at itk.org
>  http://www.itk.org/mailman/listinfo/insight-developers
>



-- 
Stephen R. Aylward, Ph.D.
Chief Medical Scientist
Kitware, Inc. - Chapel Hill Office
http://www.kitware.com
(518) 371-3971 x300


More information about the Insight-developers mailing list