"Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues" - Linux

This is a discussion on "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues" - Linux ; http://blogs.zdnet.com/security/?p=1064 Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues Not to defend Microsoft, as kernel exploits that provide privileged access are terrible flaws, but we had an interesting discussion in the talkbacks ...

+ Reply to Thread
Results 1 to 4 of 4

Thread: "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues"

  1. "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues"



    http://blogs.zdnet.com/security/?p=1064


    Word up to Linux fan boys: Multiple Linux flaws show that Linux also has
    kernel issues



    Not to defend Microsoft, as kernel exploits that provide privileged access
    are terrible flaws, but we had an interesting discussion in the talkbacks
    where several people acted as if Microsoft was the only place that could've
    made such mistakes. Well, the proof is in the pudding that this is a common
    flaw across operating systems that is difficult to catch due to the
    complexities of kernel code.

    Dann Frazier of Debian posted to Full Disclosure today about four
    vulnerabilities that allow local (this means you can't do it over the
    Internet, unless you've already compromised a user account in some way
    remotely, the same applied to the Windows flaw that I spoke of, but there
    were questions around what exactly local meant, it does not mean you have to
    sit at the box physically) attacks against the kernel that result in
    arbitrary code execution or Denial of Service conditions. The contents of
    his email are posted below:



    ** Posted from http://www.teranews.com **

  2. Re: "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues"

    On 2008-05-02, Ezekiel wrote:
    >
    >
    > http://blogs.zdnet.com/security/?p=1064
    >
    >
    > Word up to Linux fan boys: Multiple Linux flaws show that Linux also has
    > kernel issues


    ...which is ultimately meaningless.

    The real question is what exploits are out there in the wild causing
    real problems for real people rather than just giving some sad Windows
    enthusaist with no life a hardon.

    [deletia]

    You're like Dorothy with her pretty shoes trying to make something
    out of little more than wishful thinking.

    --

    Nothing today, likely nothing since we tamed fire,
    is genuinely new: culture, like science and |||
    technology grows by accretion, each new creator / | \
    building on the works of those that came before.

    Judge Alex Kozinski
    US Court of Appeals
    9th Circuit


    Posted Via Usenet.com Premium Usenet Newsgroup Services
    ----------------------------------------------------------
    http://www.usenet.com

  3. Re: "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues"


    "JEDIDIAH" wrote in message
    news:slrng1ushc.1r7.jedi@nomad.mishnet...
    > On 2008-05-02, Ezekiel wrote:
    >>
    >>
    >> http://blogs.zdnet.com/security/?p=1064
    >>
    >>
    >> Word up to Linux fan boys: Multiple Linux flaws show that Linux also has
    >> kernel issues

    >
    > ...which is ultimately meaningless.


    Not nearly as meaningless as your pathetic excuse of a post.


    > The real question is what exploits are out there in the wild causing
    > real problems for real people rather than just giving some sad Windows
    > enthusaist with no life a hardon.


    There's certainly enough out there "in the wild" causing real problems. Look
    at all of the linux websites (including Schestowitz.com) that were hacked
    and vandalized. Look how Ubuntu servers were hacked and were attacking each
    themselves and other servers.

    There's certainly enough out "in the wild" to create real problems. Unless
    you plan on taking the Ostrich Defense and claim that just because you don't
    think it's a real problem then nobody else will either. Seems that Dann
    Frazier of Debian cares enough that he posted to 'Full Disclosure' details
    about four vulnerabilities.

    Are you claiming that he's more clueless than you are?


    > [deletia]
    >
    > You're like Dorothy with her pretty shoes trying to make something
    > out of little more than wishful thinking.
    >
    > --
    >
    > Nothing today, likely nothing since we tamed fire,
    > is genuinely new: culture, like science and |||
    > technology grows by accretion, each new creator / | \
    > building on the works of those that came before.
    >
    > Judge Alex Kozinski
    > US Court of Appeals
    > 9th Circuit
    >
    >
    > Posted Via Usenet.com Premium Usenet Newsgroup Services
    > ----------------------------------------------------------
    > http://www.usenet.com



    ** Posted from http://www.teranews.com **

  4. Re: "Word up to Linux fan boys: Multiple Linux flaws show that Linux also has kernel issues"

    On 2008-05-05, Ezekiel wrote:
    >
    > "JEDIDIAH" wrote in message
    > news:slrng1ushc.1r7.jedi@nomad.mishnet...
    >> On 2008-05-02, Ezekiel wrote:
    >>>
    >>>
    >>> http://blogs.zdnet.com/security/?p=1064
    >>>
    >>>
    >>> Word up to Linux fan boys: Multiple Linux flaws show that Linux also has
    >>> kernel issues

    >>
    >> ...which is ultimately meaningless.

    >
    > Not nearly as meaningless as your pathetic excuse of a post.
    >
    >
    >> The real question is what exploits are out there in the wild causing
    >> real problems for real people rather than just giving some sad Windows
    >> enthusaist with no life a hardon.

    >
    > There's certainly enough out there "in the wild" causing real problems. Look
    > at all of the linux websites (including Schestowitz.com) that were hacked
    > and vandalized. Look how Ubuntu servers were hacked and were attacking each
    > themselves and other servers.


    ....an entirely different issue than the one in the article.

    >
    > There's certainly enough out "in the wild" to create real problems. Unless


    ....only if you are a server admin that has no descrimination when
    it comes to PHP applications.

    > you plan on taking the Ostrich Defense and claim that just because you don't


    Nope. I just understand what's going on and why it may or may
    not be relevant to me or some mother-in-law type person that
    might be running Linux.

    In general, a touch of paranoia is called for. That's why the aforementioned
    mother-in-law type user should be getting out of the habit of installing
    every little scummy IE plugin they come across. The ability to be even less
    inviting with some of the more popular firefox extensions is evne more useful.

    [deletia]

    Knowing that security is imperfect is the first step in realizing that
    perhaps you shouldn't do something just because you can.

    If different entities can re-package the core OS with this in mind they
    can avoid a lot of these problems for you. This is one of the key
    advantages of having more than one provider of anything in any market.



    --

    Nothing today, likely nothing since we tamed fire,
    is genuinely new: culture, like science and |||
    technology grows by accretion, each new creator / | \
    building on the works of those that came before.

    Judge Alex Kozinski
    US Court of Appeals
    9th Circuit


    Posted Via Usenet.com Premium Usenet Newsgroup Services
    ----------------------------------------------------------
    http://www.usenet.com

+ Reply to Thread