begin  quoting Christian Seberino as of Wed, Apr 20, 2005 at 02:08:38PM -0700:
> Yea but if your yum update crontab entry downloads updates every morning
> then you'll get the ssh fix before anyone ownz your boxen!

That presumes that the exploit was discovered and fixed by the whitehats
before it was used by the blackhats.

Sometimes the first anyone learns of an exploit is when it's used
against them.

-Stewart "Auto-update! Whee! Compromise the server!" Stremler

Attachment: pgpmKglnzGT7Y.pgp
Description: PGP signature

-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to