Karsten M. Self wrote:
I think that many do. I think your fears are somewhat misplaced.
The advice is still valid.
I think why some of us have taken such exception to Paul's flippant reply is because this is debian-user, not debian-guru. We do have people here who are Debian, linux and/or unix neophytes. Presenting the "technically correct" answer with the entirely incorrect attitude is not a good example to present to people who are not as familiar as some us old farts are when it comes to thinking about security.
Or, to put it another way, a lot of old hands who have a passing interest in computer security know that security is a process, not a program. The most stringent security measures don't mean jack if someone can do basic social engineering to get around it *or* if the people who should be looking after their own security have the attitude that it isn't needed so never start the process in the first place.
Paul's flippant answer completely disregards that basic fact of security. The recent break-in on the Debian servers underscore it. While Tom's predictions are most likely off the mark I think there is a very valid point that we who at least have a basic understanding of security not only as a program but as a process should not encourage others to disregard the process with misplaced, flippant, arrogant postings.
Am I worried about a Linux virus? No, not really. Even though I have seen one in the wild that had propigated to several other systems. It was the first time in years of hearing that it was theoretically possible. I know have first hand proof it can happen. But even with my lack of worry I will encourage others to engage in the process because it is that process and the habit of engaging in it that will help them prevent problems down the road more than the scanner I'm directing them to.
--
Steve C. Lamb | I'm your priest, I'm your shrink, I'm your
PGP Key: 8B6E99C5 | main connection to the switchboard of souls.
-------------------------------+---------------------------------------------
Attachment:
pgpA2I09jzUX7.pgp
Description: PGP signature