Messages in this thread | | | From | Florian Weimer <> | Subject | Re: thoughts on kernel security issues | Date | Fri, 14 Jan 2005 15:52:19 +0100 |
| |
* Julian T. J. Midgley:
>>vendor suffer from that as well. Suppose vendors learn of a problem in >>a product they visibly use such as apache or rsync. If all vendors >>suddenly update their versions or disable things that will be noticed as >>well, so vendors can't do that. > > I don't buy that at all. There are numerous reasons for updating > programs or disabling things, of which fixing security holes is but > one.
People used to monitor large name servers run by the in-crowd for synchronous updates, to get advance notice of the existence of BIND security holes. AFAIK, it was a reliable indicator. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |