| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <200405111752.i4BHqcJp023057@turing-police.cc.vt.edu> From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu) Subject: Calcuating Loss On Tue, 11 May 2004 08:37:30 PDT, Harlan Carvey said: > Two words..."testing process". What happened to that? > Don't tell me you're installing patches directly to > production systems... And three words in return: "time till worm". We're fast approaching the point where a site can't do anything resembling a reasonable testing process and complete it before the worm arrives. You can buy yourself *some* time if you start advertising that your jobs will require second and third shift work the second week of every month..... And remember - it's not just sysadmins. You'll need to involve the application support and programming staff, and quite possibly end users as well (more than once, we've had stuff that checked out OK in our internal tests, but a user managed to kill it on Test Sunday). -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 226 bytes Desc: not available Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040511/8f682348/attachment.bin
Powered by blists - more mailing lists