Beefy Boxes and Bandwidth Generously Provided by pair Networks
go ahead... be a heretic

Re: Re: Security matters: keep thy doors closed!

by nacka (Friar)
on Jun 15, 2002 at 11:06 UTC ( #174829=note: print w/replies, xml ) Need Help??

in reply to Re: Security matters: keep thy doors closed!
in thread Security matters: keep thy doors closed!

I wish following BUGTRAQ was a 'damn good idea', but currently I don't see the point in doing so.
  1. BUGTRAQ is a moderated list.
  2. CERT, SANS and others coordinates all advisories with the authors of the missbehaving package and all big Linux distributions. And together they decide when to release the advisory.

From my point of view (sysadm) this s**cks.

Anyone remember an advisory about Wu-FTPD six months ago. IIRC Redhat published there advisory as soon as they had a fix, and the other distributors and CERT(?) accused Redhat of not following the rules regarding how advisories should be published.

I am not interested in the upgraded package, I want to know when someone find a exploitable security bug.
If there is a security bug in some vital piece of software, like apache or ssh, maybe the right thing to do is shut the service down. But since we want be telled that the bug exist until RedHat/Mdk/Caldera etc etc etc all have updated package, we have production system with exploitable holes.

Regarding the Perlmonks code: Doesn't the Perlmonks community hold all the best perl hackers on the planet?
If the code could not stand the audit from it's own community, then maybe it's time to throw old things out, do it all over again and do it right (Flame, flame :) )
  • Comment on Re: Re: Security matters: keep thy doors closed!

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://174829]
[marioroy]: LA only $ and \ needed backslash, not ' and ".
[marioroy]: my @music_times = qx(find \$HOME/Music/ Albums -type f -iname '*.mp3' -exec mp3info -p "%S\\n" {} \\;);
[marioroy]: I wanted to come back and report on that.
[marioroy]: cheers

How do I use this? | Other CB clients
Other Users?
Others chilling in the Monastery: (7)
As of 2017-04-23 22:38 GMT
Find Nodes?
    Voting Booth?
    I'm a fool:

    Results (433 votes). Check out past polls.