[rescue] Linux Luserisms (was: secondary market storage?)

Kurt Mosiejczuk kurt at csh.rit.edu
Tue Apr 2 13:04:11 CST 2002


On Tue, 2 Apr 2002, Eric Dittman wrote:

> And that's exactly what I'm saying.  You have to install
> the patches or your box isn't secure.  Claiming there's
> not a problem because the service is turned off out-of-
> the-box is just semantics, since they are going to be
> turned on 99% of the time.

But it's not semantics.  Somebody brought up secure and
out-of-the-box being mutually exclusive in UNIX.  Someone
else pointed out OpenBSD, and you said OpenBSD is on the
CERT advisories.

Just because you are changing what we were talking about
doesn't make my point "just semantics".

Beyond which, how many web servers do you need on your
network?  Apache is included in the OpenBSD base install
but not turned on... do you turn it on on 99% of your
machines?

--Kurt



More information about the rescue mailing list