Text 1653, 53 rader
Skriven 2004-10-17 21:32:08 av Pascal Schmidt (1:153/401.2)
   Kommentar till text 1646 av Chip Hearn (1:3613/52)
Ärende: Re: Getting grubby
==========================
Hi Chip!

 CH> Turned out this guy had installed some web
 CH> administration program, that came with RH... He hadn't configured it 
 CH> at all, and it was still sitting there with the "Default" 
 CH> username/password set. 
Ugh. This is why such programs should be installed so that they won't run
unless somebody configured them. ;)

 CH> That is true.  By not running anything from the "Root", you are much
 CH> safer, same is true of WinNT2000 and XP.  By creating a Limited user,
 CH> you can limit the damage per say.  :) 
Many Windows users still use an account that is allowed to install software on
the machine. :(

 CH> Well, how do
 CH> these supposed exploits occur if there are "Thousands" all looking at
 CH> the code.  It shouldn't happen at all.
New code is being written, and it takes a while for the thousands of reviewers
to do their thing. There's also the problem that not all code is interesting
enough to attract peer review.

 CH> There are also thousands looking
 CH> at the code at Microsoft too, and look at the holes and exploits 
 CH> there.
I very much doubt MS has thousands of programmers looking at the *same* code.
My guess would be each programmer at MS has only to look after a tiny part of
the code to Windows. The complexity lies in how all those parts interact.

Plus MS's focus in the past has not really been on security, but in adding
features for the user's "convenience".

 CH> The only reason it is worse for them, is there are Millions more 
 CH> using it.
I don't buy it. Unix and Windows are still a very different design. Unix has
been networked longer than Windows.

 CH> There are a whole bunch.  Most are free, but a few are charging.  I 
 CH> saw
 CH> a list 2 days ago, on sourceforge that covered all the AV programs 
 CH> for
 CH> Linux known at the time, and their capabilites.  F-Prot, Trend Micro,
 CH> etc... <I have no affiliation with any of them!>  :)  
I though F-Prot was one of those that scanned for DOS/Windows viruses, for use
on Linux file servers that serve Windows machines. Sure, there are a lot of
virus scanners that run on Linux, but do they detect Linux viruses (are any
successful ones even known)?

Ciao
Pascal

--- Msged/LNX 6.1.1
 * Origin: Priority override. Tears of Ra. (1:153/401.2)