Beefy Boxes and Bandwidth Generously Provided by pair Networks
Your skill will accomplish
what the force of many cannot
 
PerlMonks  

Re: Re: Security matters: keep thy doors closed!

by nacka (Friar)
on Jun 15, 2002 at 11:06 UTC ( #174829=note: print w/ replies, xml ) Need Help??


in reply to Re: Security matters: keep thy doors closed!
in thread Security matters: keep thy doors closed!

I wish following BUGTRAQ was a 'damn good idea', but currently I don't see the point in doing so.

  1. BUGTRAQ is a moderated list.
  2. CERT, SANS and others coordinates all advisories with the authors of the missbehaving package and all big Linux distributions. And together they decide when to release the advisory.

From my point of view (sysadm) this s**cks.

Anyone remember an advisory about Wu-FTPD six months ago. IIRC Redhat published there advisory as soon as they had a fix, and the other distributors and CERT(?) accused Redhat of not following the rules regarding how advisories should be published.

I am not interested in the upgraded package, I want to know when someone find a exploitable security bug.
If there is a security bug in some vital piece of software, like apache or ssh, maybe the right thing to do is shut the service down. But since we want be telled that the bug exist until RedHat/Mdk/Caldera etc etc etc all have updated package, we have production system with exploitable holes.

Regarding the Perlmonks code: Doesn't the Perlmonks community hold all the best perl hackers on the planet?
If the code could not stand the audit from it's own community, then maybe it's time to throw old things out, do it all over again and do it right (Flame, flame :) )


Comment on Re: Re: Security matters: keep thy doors closed!

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://174829]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (5)
As of 2014-08-30 04:10 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    The best computer themed movie is:











    Results (291 votes), past polls