ssh Access from the internet

[Robert Brockway]

On Tue, 13 May 2008, Richard Weait wrote:

> And yet, there can still be trouble.
> [SECURITY] [DSA 1571-1] New openssl packages fix predictable random
> number generator
> http://lists.debian.org/debian-security-announce/2008/msg00152.html

Quite right, which is why I put the caveat in - without even knowing there 
was an exploit announced today.

While this one is not security model related a lot of the exploits we see 
are.  I look forward to OSes doing security "better" in the future. 
Things like W^X is a start but IMHO the future really is in the current 
batch of research OSes.  As has happened in the past, advances will 
continue to be passed back to mainstream OSes but they are still 
constrained by their fundamental design.

Cheers,

Rob

-- 
"With sufficient thrust, pigs fly just fine..."
 	-- RFC 1925 "The Twelve Networking Truths"
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists