-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alex Efros wrote:
> For now I see only two alternatives for 'no security holes & no critical bugs'
> distribution:
> 1)  Use something like stable Debian/whatever distribution, which was
>     released some time ago, and has old enough software with good support:
>     updates with (backported) security fixes and critical bug fixes
>     (or workarounds). Weakness of this way is having sometimes too old
>     software, which is unacceptable because your customers will need
>     features of newer software and you'll have to install & support it
>     manually.
> 2)  Believe in Gentoo ARCH=x86 _IS_ 'stable' in all means and spend a little
>     more time for compiliing/updating/testing. As bonus you'll have fairly
>     up-to-date system with more features and your customers will love it. :)

Not only that, but old (ala Debian/stable) software may be vulnerable too, as 
bugs that may have
seen impossible to exploit are now exploitable because newer explotation 
techniques appear. :)

- --
Arturo "Buanzo" Busleiman - VPN Mail Project - http://vpnmail.buanzo.com.ar
Consultor en Seguridad Informatica - http://www.buanzo.com.ar
http://www.vivamoslavida.com.ar - Portal no-comercial del buen vivir!
for f in www blog linux-consulting vpnmail; do firefox http://$f.buanzo.com.ar 
; done
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE/wnGAlpOsGhXcE0RAu6pAJ44zlwqah0bjQEVn3rXaqn3AaDkPACdFTQF
xEuP1/HlEixIw05o7nWf4Hk=
=KdCQ
-----END PGP SIGNATURE-----
-- 
[email protected] mailing list

Reply via email to