Re: Linux (in)security (Was: Re: [Full-Disclosure] Re: No Subject)

[Darren Reed <avalon@caligula.anu.edu.au>]

In some mail from Bassett, Mark, sie said:
> 
> I think something we are also forgetting is that statistically *nix
> users are people who are computer geeks.  Average joe #1 buys his pc
> from Best buy pre-loaded with windows XP and has no clue how to install
> it.  Currently vendor pre-loaded *nix machines aren't very popular,
> which means in order to have linux on your machine, you must
> download/purchase it and load it yourself.  Most people don't want to
> mess with the hassle of the whole thing, aside from the fact that it
> doesn't play new game #1313413.  All this means is that the *typical*
> *nix user knows what they are doing and therefore knows to keep the
> machine updated. 

Cripes, just you far down in the sand do some of you have your head ?

If someone discovers a new hole in say IIS plus apache/sendmail, and
writes a worm/DoS that takes advantage of it, properly, you won't know
about it until 'every' host on the 'net is infected or it stops.

Darren

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html