Debian attacker may have used new exploit

[Chris Keelan]

On Tue, 2 Dec 2003 18:01:31 -0500 (EST)
Justin Zygmont <jzygmont-tEQKYFGiemxAYG7eUwYNkWD2FQJk+8+b at public.gmane.org> wrote:

> I guess they're going to take security a bit more seriously now?  hehe

Read the Debian Investigation Report After Server Compromises at 
<http://linuxtoday.com/security/2003120202726SCDBSV>.

They've /always/ taken security seriously. The wisest approach to
is to assume that you're going to get 0wn3d and plan accordingly.

Ask yourself: if this were a certain proprietary company, would this
news leak out so quickly, and would said organization publish a detailed
post-mortem as soon as one is available?

I think that Debian getting 0wn3d demonstrates not only that the FS
community is committed to security but that this commitment actually
pays off.

~ C
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml