Re: The state of linux security

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Cheradenine Zakalwe <sc.contact@...>
Cc: <linux-kernel@...>
Date: Wednesday, July 16, 2008 - 1:57 pm

> the relative security of linux and the likely hood that smart people

Distributions assign CVE numbers to kernel vulnerabilities. As
distributions like Fedora ship current kernels they provide a pretty
complete summary.


Wrong question. Thats a very naïve basis for thinking about security. Why
should end users care whether a flaw was added deliberately or by
mistake. What matters is that the flaw is identified. A passive attacker
observing a flaw and using it is at least as dangerous if not more so
than an active attacker.

Alan
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
The state of linux security, Cheradenine Zakalwe, (Wed Jul 16, 12:05 pm)
Re: The state of linux security, Helge Hafting, (Sun Jul 20, 7:01 am)
Re: The state of linux security, Alan Cox, (Wed Jul 16, 1:57 pm)
Re: The state of linux security, Stefan Roas, (Wed Jul 16, 4:29 pm)
Re: The state of linux security, , (Wed Jul 16, 4:08 pm)
Re: The state of linux security, David Newall, (Wed Jul 16, 12:38 pm)
Re: The state of linux security, , (Wed Jul 16, 12:38 pm)
Re: The state of linux security, Randy Dunlap, (Wed Jul 16, 12:26 pm)