Re: Debian Investigation Report after Server Compromises
On Tue, 2003-12-02 at 19:12, Alex Malinovich wrote:
> I'm afraid I'm part of the group that just doesn't understand. This
> snippet reeks of security through obscurity for me. If the hole has been
> identified and, presumably, fixed, why not tell people about it?
Because there will be lots of people who haven't yet had the chance to
upgrade. They won't thank us for making an exploit available to every
would-be cracker.
--
Oliver Elphick Oliver.Elphick@lfix.co.uk
Isle of Wight, UK http://www.lfix.co.uk/oliver
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839 932A 614D 4C34 3E1D 0C1C
========================================
"For the mountains shall depart, and the hills be
removed; but my kindness shall not depart from thee,
neither shall the covenant of my peace be removed,
saith the LORD that hath mercy on thee."
Isaiah 54:10
Reply to: