Re: [inbox] Re: [Full-Disclosure] CyberInsecurity: The cost of Monopoly

From: Rodrigo Barbosa (rodrigob_at_suespammers.org)
Date: 09/30/03

  • Next message: Bruce Ediger: "RE: [inbox] Re: [Full-Disclosure] CyberInsecurity: The cost of Monopoly" 
    To: Frank Knobbe <frank@knobbe.us>
Date: Mon, 29 Sep 2003 21:49:26 -0300

    On Mon, Sep 29, 2003 at 07:27:51PM -0500, Frank Knobbe wrote:
    > Don't shift blame to the admins. There are good admins on Windows, and

    "Shift blame" ? I'm not doing such a thing. Also, I'm not here
    shift blaming from admin. I'm just saying the OS A_L_O_N_E should not
    be blammed. There are bugs on OS, true. But one should not blame the
    OSes alone. Work has to be done on the software, the admins, and on
    users.

    > In both cases, Windows and Unix, the role of the admin is important. But
    > take the admin out of picture for the moment and just compare Unix to
    > Windows from an architectural point of view.

    You won't get an argument from me on that point. As I stated earlier,
    I DO think Unix is much more secure then Windows. I don't have a single
    Windows machine at home or at my company, for that matter.

    So, before anyone else misinterpret what I said before, lemme try
    to say it one more (and for the last) time:

    1) I DO think Unices are more secure then Windows
    2) I DO think Netware is more secure then Windows
    3) I DO think MacOS and MacOS/X are more secure then Windows

    ok ? Now, for the part I was stating earlier:

    4) Some (most?) people try to lay all the fault on Windows (pick your OS
       here). But the OS is not at fault alone. Many, perhaps even most,
       vulnerable system (Unix, Windows etc) are so because of bad admins, who
       don't configure it correctly, don't install patches and so on
    5) Users are, in many cases, also the most dangerous security related link
       do the chain

    As some may recall, my original statement was an answer to someone that
    was points that Unix is more secure then Windows (I agree up to this point),
    and gave and example telling that there are still several codered vulnerable
    machine around. This is the point I was commenting about. And you do
    have to agree that is a machine, today, is still vulnerable to Codered,
    it is mostly due to a fault of the administrator.

    []s 

    -- 
Rodrigo Barbosa <rodrigob@suespammers.org>
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Bruce Ediger: "RE: [inbox] Re: [Full-Disclosure] CyberInsecurity: The cost of Monopoly"

    Relevant Pages

    • Re: [Full-Disclosure] Re: Knocking Microsoft
      ... Also as for lame admins.. ... when the base OS is more secure then Windows it's not as painful ... UNIX was not made to be secure. ...
      (Full-Disclosure)
    • Re: Linux...Is it REALLY FREE? How much is YOUR TIME WORTH?
      ... I have never had to rebuild a SQL server. ... like Windows 2000-->2003, ... >> sucks that there aren't many really good Linux games. ... those same admins would give away root access to Linux users too. ...
      (alt.os.linux.suse)
    • Re: Oracle 10g on HP blade server
      ... All *NIX admins, however, understand Windows ... ... spent three months building the VPN server) that all such VPN servers ... We have a couple Linux boxes running here, but after seeing one of them ...
      (comp.databases.oracle.server)
    • Re: Oracle 10g on HP blade server
      ... All *NIX admins, however, understand Windows ... ... spent three months building the VPN server) that all such VPN servers ... We have a couple Linux boxes running here, but after seeing one of them ...
      (comp.databases.oracle.server)
    • Re: [Full-Disclosure] The worm author finally revealed!
      ... > patching, and indeed it seems a carzy mess in the windows world, whence ... > patch, as well as the issues of what thrid party software might do the ... We recently purchased HEAT (a Help Desk - call ... further investigation revealed that one of our admins had patched the ...
      (Full-Disclosure)