| |||||||||||||
Kernel.org's road to recoveryKernel.org's road to recoveryPosted Oct 6, 2011 22:14 UTC (Thu) by nix (subscriber, #2304)In reply to: Kernel.org's road to recovery by malor Parent article: Kernel.org's road to recovery
Twenty years ago, if Linux got something wrong, about the worst that would happen was maybe some corporate espionage.In October 1991, if Linux got something wrong, I don't think corporate espionage would have resulted. About fifteen people's machines would have crashed. :) (Perhaps you meant 'ten years ago'?)
(Log in to post comments)
Kernel.org's road to recovery Posted Oct 6, 2011 22:49 UTC (Thu) by malor (subscriber, #2973) [Link]
Well, okay, thirteen years ago; I was definitely using Linux for actual production by 1998.
The basic point remains: back then, a security breach was a hassle, but generally cost you only the time to fix it. These days, having your network penetrated can have extremely unpleasant consequences, up to and including death.
Kernel.org's road to recovery Posted Oct 7, 2011 9:00 UTC (Fri) by cate (subscriber, #1359) [Link]
But this is a problem of bad security people, not (only) bad kernel.
13 years ago many security people was thinking about perimeters, DMZ, etc. thinking that internal net was safe, because "in control" of security people. Only to discover that they were very wrong: people attached modems (then laptop, then USB disks) against corporate rules.
I think now we have the same problem: some people think that kernel is unbreakable (it they update quickly after announced CVE), thus tend to trust the "computer perimeter" too much.
IMHO if a system can kill a man because of a kernel bug, it means that the security responsible was very incompetent.
Kernel.org's road to recovery Posted Oct 7, 2011 10:42 UTC (Fri) by ortalo (subscriber, #4654) [Link]
It could possibly be simply that the security team does not have enough authority. Users are not so innocent usually (though generally totally unconscious of that).
Plus, the real culprit is... the attacker.
|
|||||||||||||