Security Flaw

This Forum is for Question, Comment, Request & all things conserning Linux. All Hail Mighty Tux

Moderator: [PX]Kal Bob

User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Security Flaw

Post by THE JEW (RaVeN) »

http://news.com.com/2100-1002_3-5162055 ... g=nefd_top

Not as bad as the Window's ones, but there nonetheless.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
Ghost [PX]
Posts: 3392
Joined: Sun Mar 23, 2003 2:36 am
Location: The smallest room in existence
Contact:

Post by Ghost [PX] »

Well, No code is ever perfect, and I have never said that Linux is perfect.

However, a total of three security flaws in how many months? That seems just a bit more stable than Anything else out there. They'll have this fixed in the next kernel, probably within a week or so.
Nature is bountiful where idiots are concerned

No, they arent breasts, they're personalities, because its ok to like a girl for her personalities

It takes a big man to cry, but it takes a bigger man to laugh at that man
[PX]Kal Bob
Site Admin
Posts: 1959
Joined: Sun Mar 23, 2003 1:41 am
Location: Stalinist Russia!
Contact:

Post by [PX]Kal Bob »

Moreover, the discovery of serious flaws in the kernel the past three consecutive months raises questions about the "many eyes" theory, which maintains that open-source software can be audited for security holes easily and is therefore more secure. In reality, the majority of developers don't like to review old code, Huger said.

"I think the concept is great, but by and large, I don't think the practice is as true as people would like it to be," he said.


I disagree with this, the whole idea is that people put the kernel through hell to find bugs like this. The difference between Linux an Other companies is that they don't get pissy about a bug, they fix it.

For example, they relessed the 2.4.25 kernel patch to cover those holes. Thus I say, go iSEC Security Research, keep up the good work. And go Kernel Programers for fixing it so fast!
KalNet SysAdmin.
Elitism- It's Lonely At The Top. But It's Comforting To Look Down Upon Everyone At The Bottom.
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

A compromised, script-happy server:

http://blog.gnist.org/article.php?story ... ayCracking

Interesting how he tracked it down and fixed it.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

Rootkit for Linux hitting eBay servers:

http://computerworld.co.nz/news.nsf/scr ... 6A000E4723

Remember--the kernel is secure but the OS is not.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

URI security flaws on M$, Linux, and MacOSX:

http://news.yahoo.com/s/pcworld/2007101 ... rld/138428
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

Guide to patching your Linux install:

http://www.tomsguide.com/us/linux-updat ... -1033.html

Also covers 3rd party patching software.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

Mac OSX (but since it's BSD-based, I thought I'd post it here) has 5 times as many critical flaws as XP and Vista combined this year:

http://news.zdnet.co.uk/security/0,1000 ... 625,00.htm

Now, is it just that OSX is less secure or that M$ isn't telling all of their vulnerabilities? That's the real question.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

Whoops!

http://it.slashdot.org/it/08/05/13/1533212.shtml

Debian accidentally lets people guess SSL/SSH codes.
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Post by THE JEW (RaVeN) »

Followup on the Debain SSL fiasco:

http://www.dailytech.com/article.aspx?newsid=11869
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Re: Security Flaw

Post by THE JEW (RaVeN) »

How to write KDE and Gnome virus and malware:

http://it.slashdot.org/it/09/02/17/1526244.shtml
******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
User avatar
THE JEW (RaVeN)
Posts: 12499
Joined: Sun Mar 23, 2003 2:52 pm
Location: Bethlehem ;)
Contact:

Re: Security Flaw

Post by THE JEW (RaVeN) »

******* /=========\Image
****(_]/_____________\[_)
***** /(__)==JEW==(__)\
***** |=o__________o=|
***** |_|====---====|_|
Image
¨˜”°º•[K]•º°”˜¨
Post Reply

Return to “Linux Forum”