Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
The Allure and Curse of Complexity
Jason Miller, 2004-07-01

The curse of complexity is the bane of every security administrator, so UNIX users take your pick: would you like BSD or Linux?

Comments Mode:
Dont forget about Macs!! 2004-07-02
Anonymous (2 replies)
Secure AND extremely usable.

I can do everything I need and more. I can control Windows Servers via remote desktop AND scan for vulnerabilities using Nessus. Drivers are not an issue.

Even the FBI uses them.

There are plusses and minusses for Macs; I use many, but also use Linux and Window...

[ more ]  [ reply ]
Dont forget about Macs!!...right 2004-07-05
bassdemon
yeah i wouldn't bet on that secure aspect. check slashdot. there's a link to a recent analysis of OS security and mac isn't faring as well as you would think. and as for the fbi using macs. sure. they have to use every OS so they can have an easy way of forensic analysis. if it's used by someone the...

[ more ]  [ reply ]
Dont forget about Macs!! 2004-07-06
Anonymous (1 replies)
>I just think that the Mac should have rated >a quick mention in Jason Millers article.
I guess they have since they are built on FreeBSD ;)

...

[ more ]  [ reply ]
Dont forget about Macs!! 2004-07-06
Anonymous
Build on FBSD with insecurity added on by Apple.

enjoy the show....

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-02
Anonymous
I disagree with you. You cannot compare complexity of IE (and major security issues derived from that) with complexity of some tools like yast or drakconf; their scope is a limited one and it could be considered simple as the rest of *nix tools, being build after *nix philosophy (the only job: editi...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-02
Anonymous
All I do on my computer is code, surf the web, and make beats.

Complexity or not, it just seems to me that there is way more effort being put into the areas that I want/need in Linux than is put into the same areas in the BSDs. Like, AFAIK, the BSDs don't support my winmodem, or have advanced au...

[ more ]  [ reply ]
Lynx, give me a break. 2004-07-02
Anonymous (2 replies)
Why don't you compare Apples to Apples. Wouldn't Mozilla be a better comparison....

[ more ]  [ reply ]
Lynx, give me a break. 2004-07-03
Anonymous
You missed Jason's point he was not looking for an Apples to Apples comparison. Lynx is simple, just does ths job therefore few things can go wrong. Accepted that Mozilla and many other deivatives of browsers are far more likely to have things go wrong, the complexity issue ...

My preference is t...

[ more ]  [ reply ]
Lynx, give me a break. 2004-07-03
COMprehensive
I don't mean to be a punk but I do believe you are missing the point. To compare mozilla vs explorer would be the equivalent of comparing "apples to apples." If you follow the logic of the authors premise for the article you will see that he is trying to point out the inherent problems of complex sy...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-03
Scott Gever (1 replies)
You said,

"What more could you ask for? Personally, I can't think of much else. However, I'm far from the majority. When compared with Linux-based operating systems, those systems based on BSD are easily the far less popular of the two."

I don't think you've acclimated to Mac OS X being a BSD...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-07
Anonymous
> I don't think you've acclimated to Mac OS X being a BSD Unix system and it being the most widely shipped *nix in the world.

Well, apple reckon they've shipped about 10 million OS-X (http://www.apple.com/pr/library/2004/jan/06macosx.html ), and the linux counter thing estimates about 18million l...

[ more ]  [ reply ]
As I see it... 2004-07-03
Griggs
...complexity is only part of the problem and IMHO the main problem is because the Windows API was originally developed with functionality/ease of use as the main priority and security a meager afterthought. So later, Microsoft realizes the importance of developing secure code and builds layer upon...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-04
Anonymous
I think the issue is more that BSD "Simple by default" <:

Linux can be pretty darn simple too with a tiny kernel and say a Debian base install....

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-04
Anonymous
Complexity may not be such a curse if security pervades the way a piece of software has been written. It's not only the complexity of MS's OS line that makes them insecure. The foundations of the Windows line were written without security in mind. Security was something that was bolted on later. ...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-07
Aaron Sherman <ajs@ajs.com> (1 replies)
This was a terrible article.

If you want to flame about BSD and Linux, you can always post on Slashdot, but if you're going to write an article for Security Focus, I would have hoped that you would include a few facts.

The article swings between extreme arguments for and against homogeneity, c...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-09
Jason V. Miller (Author)
> This was a terrible article.
>
> If you want to flame about BSD and Linux, you can always post on Slashdot, but
> if you're going to write an article for SecurityFocus, I would have hoped that
> you would include a few facts.

The article was never intended to ?flame? Linux, only point out ...

[ more ]  [ reply ]
Depends on the application 2004-07-08
BSDbiggot
BSD makes a great server O/S for all the reasons you mention ... but on the desktop, it lacks in many areas (like all those 'features' you discussed).

For example, getting DRI to work when using the Gateway they made me buy here at the office (Intel 845 chipset) .. No driver available for it, thu...

[ more ]  [ reply ]
We don't need a complex world 2004-07-12
Anonymous
I like that article, let me to continue ...

Who the hell needs (complex) houses when you can dig a hole into the ground. Remember Diogenes?

Who the hell needs (complex) cars, when you can run?

Who the hell needs (complex) OS'es when you can use simple calculator to add and substract.

Who...

[ more ]  [ reply ]
Everything is complex anyway 2004-07-12
Neeme Reinmets
Excuse me, that article was a shame.

If one knows well how to use one tool he can't blame others for preferring other tools. The complexity isn't the case here, it looks moore like personal preferences and the trust.

The graphical interface makes configuration and management more efficient by ...

[ more ]  [ reply ]
The Allure and Curse of Complexity 2004-07-13
Anonymous
Barring the content of the article... ...the case for complexity vs security is an obvious one.

Looking at complexity as a numbers problem, it's obvious that adding more components to a system is a high growth function.

For example : a system with n interacting subsystems can have n(n+1)/2 i...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus