full-disclosure - Linux (in)security (Was: Re: Re: No Subject)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: avalon at caligula.anu.edu.au (Darren Reed)
Subject: Linux (in)security (Was: Re: Re: No Subject)

In some mail from Bassett, Mark, sie said:
> 
> I think something we are also forgetting is that statistically *nix
> users are people who are computer geeks.  Average joe #1 buys his pc
> from Best buy pre-loaded with windows XP and has no clue how to install
> it.  Currently vendor pre-loaded *nix machines aren't very popular,
> which means in order to have linux on your machine, you must
> download/purchase it and load it yourself.  Most people don't want to
> mess with the hassle of the whole thing, aside from the fact that it
> doesn't play new game #1313413.  All this means is that the *typical*
> *nix user knows what they are doing and therefore knows to keep the
> machine updated. 

Cripes, just you far down in the sand do some of you have your head ?

If someone discovers a new hole in say IIS plus apache/sendmail, and
writes a worm/DoS that takes advantage of it, properly, you won't know
about it until 'every' host on the 'net is infected or it stops.

Darren