full-disclosure - Re: Ubuntu 11.10 now unsecure by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 19 Nov 2011 04:14:24 -0300
From: root <root_@...ertel.com.ar>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Ubuntu 11.10 now unsecure by default

On 11/18/2011 11:01 AM, Darren Martyn wrote:
> To be honest, while Ubuntu is hardly secure, it is not DESIGNED to be
> secure per se. It is designed to wean Windows users away from M$ and toward
> GNU/Linux OS types. Kind of a "Linux for newbs". My family went from Win XP
> to Ubuntu years ago and stuck with it. I moved on to Debian, they stuck to
> Ubuntu and Win7 (eventually) as they are not computer enthusiasts - mere
> users.

Bullshit, Ubuntu is designed (or at least, was designed) to be very
secure, check all the stuff it comes by default:

https://wiki.ubuntu.com/Security/Features

Not even the default Debian kernel has all those features activated. If
I'm wrong, why you see metasploit modules for Debian but not for Ubuntu?
that's the reason.

Recently some stupid people got into management (as always happens) and
we have things like unity, the fucked up 24-bit ASLR in i386, and this
guest account for retards.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/