On 24 Jul 00, at 10:04, Mukund Deshmukh wrote:

> The best security is to disconnect the box from net and put it in Swiss bank
> ;-)) Now you have to explain what this box is supposed to do and what

I don't think this is secure. If a person does not have the capability to 
monitor his/her machine when he/she has a choice to be online, it is 
/really/ doubtful whether he/she will fail to screw it up when 
disconnected. Security is a measure of how paranoid you are and how you 
choose to cement this paranoia.
 
> these services. No machine in the entire net fully secured as hackers are
> always on look out for exploits and are much smarter than server admins. The

I beg your pardon. BTW, please brush up on what a "hacker" is. ESR's hacker 
howto or something like that will be at http://www.tuxedo.org/esr/. And in 
a majority of the cases, these exploits are reported by 
testers/administrators rather than crackers. And if a cracker was smarter 
than most server admins, I wonder how these explois would ever be detected!

> BTW the kernel has very little to do with security. Linux as such is very
> secured OS but the fault lies with server admin who are ignorant or
> careless.

To say that that the kernel has nothing to do with security may not be 
entirely correct. What if it causes memory/buffer overflows?

Rgds
========================================================================
Sthitaprajna | (at)mailandnews(dot)com | PGP:619E875D
Fingerprint:9A4F 8E01 A4A5 EA1A 41D2 AD1E 75BC 6F0B 619E 875D
     
"When everything comes your way, you're on the wrong lane"

----------------------------------------------------------------------
Check out the 'What to do before posting to the list' site
for a list of things to try before posting.  The site is
at http://botsie.tripod.com/beforeposting/

Reply via email to