Messages in this thread | | | Date | Mon, 8 Nov 2010 07:29:16 +0100 | From | Ingo Molnar <> | Subject | Re: [Security] [PATCH] kernel: make /proc/kallsyms mode 400 to reduce ease of attacking |
| |
* Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
> > This makes it _unsafe_ (for many types of attackers) to run an exploit locally. > > They don't care.
Sure, script kiddies and botnet builders wont care - i.e. attacks where the individual target is low value, or where either the attacker or the attacked is stupid.
But it's different when a skilled attacker meets a skilled defense: all the exploits/attacks against high-value targets i've seen showed a great deal of care taken to avoid detection.
Future trends are also clear: eventually, as more and more of our lives are lived on the network, home boxes are becoming more and more valuable. So i think concentrating on the psychology of the skilled attacker would not be unwise. YMMV.
Thanks,
Ingo
| |