Debian's Response

Debian's Response
Scott Granneman, 2003-12-03

Debian's Response 2003-12-03
Anonymous (3 replies)

If they would have used Windows ME on their servers, this never would have happened...
...

[ more ] [ reply ]

Debian's Response 2003-12-04
Penguinisto

ROTFLMAO!

nonono - if they would've used an x86'd Windows CE running a tiny version of Netscape Collabra, this would've never happened! :p

/P...

[ more ] [ reply ]

Debian's Response 2003-12-04
Anonymous

Win ME being a server OS? ;)

Had they used a MS product. MS would be crying foul that the anouncement went out 24 hours after the flaw was found. ...

[ more ] [ reply ]

Debian's Response 2003-12-09
Anonymous

Guys, this is humour...
His point is that Windows ME is, by
definition, a local root vulnerability,
there isn't any other user!
You get in, you're admin....

[ more ] [ reply ]

Good article, good call by Debian 2003-12-03
Penguinisto

This does go to show that local hardening and security is just as paramount as the remote version.

/P...

[ more ] [ reply ]

Debian's Response 2003-12-04
Coldman

Where are those Linux advocates who claim that it is secure? :)

Well, just kidding...

This case confirms that no system is safe "by definition" - regardless of its nature (open or closed source, free or commercial, etc) - because... systems are different, but developers are not :)
...

[ more ] [ reply ]

Debian's Response 2003-12-04
Anonymous (1 replies)

It couldnt have happened to a nicer distro.
but tell me, would SuSE or Redhat have handled it any differently?...

[ more ] [ reply ]

Debian's Response 2003-12-07
Anonymous

Surely not, what the Debian security team did was mostly common sense...

[ more ] [ reply ]

Debian's Response 2003-12-05
Anonymous (3 replies)

Well that's a nice, candy-coated way of washing your hands from a liability standpoint. "Hey, we dont know how to secure a kernal but when the hole is exploited, we'll let you know within 12 hours; you may or may not still be in business by then though"

Get a clue........

[ more ] [ reply ]

Debian's Response was great 2003-12-05
picklepak (4 replies)

And Microsoft is any better? In fact they're much, much worse! Here's just one example: what about all those holes in IE that remain unpatched after *six months* and allow the execution of malicious code, including code that allow for full system compromise?

Get a life!...

[ more ] [ reply ]

Debian's Response was great 2003-12-06
Anonymous

Who said anything about Microsoft pencilpusher....I mean picklepak?

v_beam...

[ more ] [ reply ]

Six-month old IE vulnerabilities 2003-12-07
Formula

I didn't know such holes existed. Where could I go to find out about the their exact nature, or details about them?...

[ more ] [ reply ]

Debian's Response was great 2003-12-08
Anonymous

I am a windows and a *nix OS user and i have to say that no OS is secure no matter what they say or how they say it. Oh and I have to say this: Windows is not that bad, there are things you can do on windows and you can't in *nix's and that's available vice-versa....

[ more ] [ reply ]

Debian's Response was great 2003-12-11
Coldman

Nobody forces you to use IE. And simply turning on ICF (WinXP/2k3 - included) will protect you from any (if not all) threats, for older systems install any 3rd-party firewall and block everything you don't want to pass, avoid visiting sites which you don't know/trust - and you will be quite safe.
...

[ more ] [ reply ]

Debian's Response 2003-12-06
Stephen Touset

Because, as we all know, it's immediately obvious how crackers have broken into a system. They never EVER attempt to edit their existence out of logfiles or cover up their tracks by installing binaries which hide their existence....

[ more ] [ reply ]

...read any EULA's lately? 2003-12-08
Anonymous

No matter what OS you use, the result is the same... warranties simply don't exist for any OS.

By the by, the break-in reeks of an inside job; the flaw in question required local shell access.

(and by comparison, how about that months-long tromp through the Windows source code?)...

[ more ] [ reply ]

Debian's Response 2003-12-06
Not surprising (2 replies)

A major flaw is found in Linux - praise them

Any flaw is found in MS however minor - bash them

Typical..... ...

[ more ] [ reply ]

Debian's Response 2003-12-08
kc (1 replies)

If the number of flaws found in the Linux kernel competed with the number found in a Windows kernel, Linux would be bashed much more often as well.

A lot of bashing stems from blunt prejudice, true. But surely not all of it....

[ more ] [ reply ]

Debian's Response 2003-12-11
Anonymous

Flaws in the "Kernel"?

Is that how the Linux rulez crowd is spinning it these days?

...

[ more ] [ reply ]

Debian's Response 2003-12-10
Anonymous

The main reason that M$ gets bashed is that they persist in writing bad code, on top of bad code.... As many have said, there is NO PERFECT OS. The better OS though, IMHO, is the one that will openly deal with issues, both major, and minor. Microsoft still needs a lot of work in this area....

[ more ] [ reply ]

Debian's Response 2003-12-08
blacklight

Debian's quickness, openness and frankness are the reasons why this MCSE has confidence in Linux as an enterprise operating system. I will not do business with any Linux distro manufacturer whose standards are lower than Debian's....

[ more ] [ reply ]