full-disclosure - Re: Ubuntu 11.10 now unsecure by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 20 Nov 2011 08:18:15 +1100
From: GloW - XD <doomxd@...il.com>
To: root <root_@...ertel.com.ar>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Ubuntu 11.10 now unsecure by default

dude, you have GOT to be kidding.
I can exploit Ubuntu 2011 server and client about 10 ways, and
probably same with half this list, it is INDED entry level, or, just
stop handding it out on magazines with "how to use ubuntu! Move to
easy linux now!" promos, and then your words have merit.



On 19 November 2011 18:14, root <root_@...ertel.com.ar> wrote:
> On 11/18/2011 11:01 AM, Darren Martyn wrote:
>> To be honest, while Ubuntu is hardly secure, it is not DESIGNED to be
>> secure per se. It is designed to wean Windows users away from M$ and toward
>> GNU/Linux OS types. Kind of a "Linux for newbs". My family went from Win XP
>> to Ubuntu years ago and stuck with it. I moved on to Debian, they stuck to
>> Ubuntu and Win7 (eventually) as they are not computer enthusiasts - mere
>> users.
>
> Bullshit, Ubuntu is designed (or at least, was designed) to be very
> secure, check all the stuff it comes by default:
>
> https://wiki.ubuntu.com/Security/Features
>
> Not even the default Debian kernel has all those features activated. If
> I'm wrong, why you see metasploit modules for Debian but not for Ubuntu?
> that's the reason.
>
> Recently some stupid people got into management (as always happens) and
> we have things like unity, the fucked up 24-bit ASLR in i386, and this
> guest account for retards.
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/