[rescue] Linux Luserisms (was: secondary market storage?)
Eric Dittman
dittman at dittman.net
Tue Apr 2 12:55:20 CST 2002
> > Yes, I don't use OpenBSD. But I see OpenBSD listed in
> > some of the latest CERT advisories, so to actually use
> > it for anything you'll have to install the latest patches
> > after installation and keep watch for future advisories.
>
> Umm... I'll just point out that OpenBSD is often on those,
> but they are either services that are not turned on
> out-of-the-box, or require a local user to exploit. They
> don't claim that the box shouldn't be maintained.
And that's exactly what I'm saying. You have to install
the patches or your box isn't secure. Claiming there's
not a problem because the service is turned off out-of-
the-box is just semantics, since they are going to be
turned on 99% of the time.
--
Eric Dittman
dittman at dittman.net
Check out the DEC Enthusiasts Club at http://www.dittman.net/
More information about the rescue
mailing list