View Full Version : And you thought windows had security flaws..
Huge Hole in Open Source Software Found, Leaves Millions Vulnerable
For all the criticism of Microsoft and its security flaws, the software giant has made an impressive turnaround. While Vista has been derided for a variety of reasons, most would agree that it’s much more secure than Windows XP. Recently, a hacker conference showed just how vulnerable systems running Mac OS X are, due to their slow rate of patches. The Mac machine was hijacked within 10 minutes, while the Linux and Windows boxes survived the day.
Now an even worse security flaw has been found in some of the basic code used by a wide variety of Linux security programs. The error originated back in May 2006 when workers on the open-source security project committed a grave and unrealized error.
http://www.dailytech.com/Huge+Hole+in+Open+Source+Software+Found+Leaves+Millions+Vulnerable/article11869.htm
|
|
richcz3
05-28-2008, 12:02 AM
Going for the Linux and Mac crowd reaction...very ballsy...(not advisable)
So .... I'll get my post in before the thread is locked down solid. :D
Tlock
05-28-2008, 01:06 AM
The security hole is serious, but i think they are just posting this to get a reaction. There has been so many Windows security holes that no one reacts any more than a "not surprised" but when it's Linux or Mac you still have the surprise reaction. If in a year from now it still can create a shock than they are doing their job cause it's not the norm.
BenCole
05-28-2008, 01:16 AM
MACs suck.
(eeeeheehee)
BeBraw
05-28-2008, 05:24 AM
Cripes. I had better go back to Windows. ;)
ThE_JacO
05-28-2008, 06:03 AM
This isn't a Linux issue, it's a very specific debian/ubuntu issue, and it doesn't regard a static issue as much as keys generated for the security of some services being weak.
Granted, ubuntu is the third most used distro and the first or second for private users and 5th graders who want to feel l337, but it's hardly a server or security focused distro :)
DailyTech as usual goes partisan and carefully words the articles to make it sound like windows comes out of it the most secure OS or something like that.
Sensationalism and crap journalism at best.
salmonmoose
05-28-2008, 06:52 AM
DailyTech as usual goes partisan and carefully words the articles to make it sound like windows comes out of it the most secure OS or something like that.
Sensationalism and crap journalism at best.
Meh.... It's not like we didn't get the same sort of crap from slashdot a few days ago with the Vista "exploit" that involved replacing files whilst booted into another operating system :)
Sharky0815
05-28-2008, 06:54 AM
Yes, to much surprise open source software has security flaws too! Even really stupid ones from time to time. The big difference is, they are disclosed immediately and you can get to work patching things yourself the instant you take note of it, if you know how. Patches and countless instructions how to fix this were available hours after the flaw was discovered if you didn't know how to fix it. Now take a guess how these kind of flaws are handled in closed-source OS's...
In my opinion this article is just a cheap shot by some (willfully?) ignorant "journalist".
biliousfrog
05-28-2008, 08:58 AM
This isn't much different to the anti-virus thing, where Norton has a much higher percentage of virus's created especially for it because it's more popular. Windows is the most popular OS so more hackers attack it which means more security holes found. Mac's are now probably the most popular they've been since the internet has become an everyday thing so hackers will begin to attack them more and find more holes...which haven't been patched because nobody was looking for them. It doesn't mean that any particular OS is more or less vulnirable, just that some have had more pointed out and therefore more fixed.
subtlebluetones
05-28-2008, 09:14 AM
serves you right for using a mac :D use a real computer.
(im really sorry. i had to)
ccherrett
05-28-2008, 09:23 AM
This is a security flaw that was a result of Debian messing with others packages. This flaw does not show in my distribution because I use the packages created by the package team it's self.
Debian could do well and stop screwing with these packages.
Who wrote that crazy slanted article anyways? They make it sound like Debian and variants are the only systems being used.
Hey did not Windows get knocked out of that competition? And was it not Linux standing in the end?
You seriously need to do some homework eek.
ThE_JacO
05-28-2008, 11:04 AM
Who wrote that crazy slanted article anyways? They make it sound like Debian and variants are the only systems being used.
You're a journalist asked to make sure you get readers, that way banner ads keep paying your bills. You don't really know WTF you're talking about, and you're presented with two options, the first:
-The Debian team, to hasten a release of a purely destkop focus easily accessible version of Linux, hastily hacked out a bit of openSSL, used to generate keys for many server applications.
This results in easier to hack keys for some services.
For 18 entire days every server that was running a desktop distro without a firewall to prevent scanning and wedging was left highly vulnerable to a bunch of well known and easily thwarted scripts.
The Linux community is laughing its pants off at people who thought running a server on cutting edge ubuntu was a good idea.
Or you could write:
- Linux is open wide and any script kid can hack nasa servers! Not to mention all the weak keys generated by this immense flaw will take years to replace!
The former would be accurate, the latter uses the flawed reverse logic that if cuttting edge ubuntu is a linux, linux is ubuntu, hence because of a chunk of the market (less than 1% server wise between debian and ubuntu, even less considering the attacks to exploit these keys usually don't make it to the key anyway) might be susceptible, Linux is worse than vista in security.
It's crap journalism, and it's nothing new. They do it all the time, it pays the bills, and tech daily is particularly bad at it.
Slashdot can be just as bad, but at least they always contextualize and tell you how the attacks were run, tech daily didn't even mention the most relevant facts about it, and inferred it was an openSSL flaw and not a distro hacked openSSL.
Going for the Linux and Mac crowd reaction...very ballsy...(not advisable)
So .... I'll get my post in before the thread is locked down solid. :D
Hehe , well i gotta start some controversy - this forums been more stale than a slice of bread for a while.
..and I'm buying a mac later in the year.
CaptainObvious
05-28-2008, 07:10 PM
Incompetent klaxon tech journalists (or indeed within ANY field) piss me off. You can't shout about "open source software" being easily hackable, when it was a non-open source system (Mac OS X) that fell first, and the only truly open source operating system in the challenge outlasted both Mac OS X and Windows Vista.
Gah!
DigitalBlaspheme
05-28-2008, 07:28 PM
I've said it before and I'll say it until I die
EVERY OS HAS ISSUES/BUGS/SECURITY FLAWS
The only exception to that rule is that there is no exception. Its all about which "flaws" you are willing to work around to get the productivity you demand from your workstation. If that leaves you running linux...great run it. But dont bash windows. If it leaves you running windows...great run it. But don't bash linux. However if it leaves you running a mac....you're in for trouble. Nope not really....that was just a bad joke. See my capitalized words....those are the ones I truelly believe. I wouldn't recommend an OS over another until I found out what you planned to get out of it.....and in this day and age even that isn't enough to recommend an os over another as all are getting increasingly good at doing what the others USED to be good at.
This article is pure FUD!
With the picture of linux pinguin crying?
It's pathetic...
At the least writer is driving his new ferrari, courtesy of MS.
Als
Stahlberg
05-29-2008, 05:18 PM
Hey Aleksander! Remember me? We used to work together in Hong Kong! (if you're the same guy with that name)
edit:
sorry, couldn't help it, to keep on topic, eeh... yeah, what the guy before Aleksander said!
Venkman
05-29-2008, 05:38 PM
If anyone truly wants security, disconnect from the intertubes!
CaptainObvious
06-02-2008, 12:36 PM
If anyone truly wants security, disconnect from the intertubes!
But then I can't idle away the day watching Youtube! How will I live?
Rezonance
06-02-2008, 12:52 PM
Is this when people start saying Mac users run O$X?:D
robodesign
06-02-2008, 01:04 PM
This is a flame war bait, imho. Thread shall be locked.
CGTalk Moderation
06-02-2008, 01:04 PM
This thread has been automatically closed as it remained inactive for 12 months. If you wish to continue the discussion, please create a new thread in the appropriate forum.
vBulletin v3.0.5, Copyright ©2000-2012, Jelsoft Enterprises Ltd.