> Ah, security… but why security is affected to such a degree by just installing features I'll not use???
Every single piece of software you have on your system can potentially be exploited to escalate privileges. Obviously, the less cruft you have lying around, the smaller the probability of having an exploitable bug.
It's the traditional convenience vs. security trade-off.
Posted Sep 27, 2013 14:54 UTC (Fri) by raven667 (subscriber, #5198)
[Link]
That's not entirely true, only software which executes across a security boundary can be used to escalate privileges, exploiting software at the same privilege level that you start at isn't very interesting. One boundary can be remote untrusted users executing a user software like a browser or game to be able to run code as a local user, another is injecting code into the kernel or exploiting an SUID binary to execute with more privileges.