Linux not so hot afterall - OpenSSL bug found in Debian Linux

[Trousersnake]

http://www.itnews.com.au/News/76080,...ian-linux.aspx

Debian, especially its stable branch, is widely regarded as perhaps the most bulletproof Linux distribution.

If that's what happens in a stable 'bulletproof' distro...may lord have mercy on all your fanboys souls


*Runs away from impeding 'But Windows has millions of bugs' replies....*

[Prometheum]

Most bulletproof doesn't mean bulletproof. Debian doesn't exhaustively security audit, that's OpenBSD's job.

The main difference between this and an M$ bug is that this will get fixed, pronto, whereas M$ would have sat on it, sued the people who disclosed it, ignored anyone who brought it to their attention, and released another buggy fix months later after someone's botnet had swelled sufficiently.

In fact, this is already fixed in Ubuntu, yesterday in fact. The only reason why Debian doesn't have a fix released yet is probably because they're being good and testing it for stability like you can trust Debian to do. These are the people that held off on publishing the time zone fix, so that's to be expected.

And yes, this is one widely publicized hole in one GNU/Linux distribution. Fedora users aren't affected. The Linux kernel is clean. There's a bug causing weaker-than-normal crypto in one package.

And yes, Windows has millions of bugs. The thing with windows is, its profitable to keep them quiet, so you don't see as much of them. There are probably hundreds of remote holes in windows totally uknown to M$, the infosec community, and the general public, because the hackers that found them are expanding their botnet herds and reaping the profits of proprietary software. Comparing that to one hole in one package in one distribution is ridiculous.

Who the hell is the fanboy?

The troll stops here

[Trousersnake]

Originally Posted by Prometheum

Who the hell is the fanboy?

You are by defending a piece of software to the core. There were other flaws of linux on that news site, you can look for them and retort to them all in a longwinded manner, I just mosted the headlining one.

redjoker: You're a dumbass, how is this trolling? The OS of choice for people anti Microsoft for whatever reason has downfalls like any other dispite all promoters saying it's perfect.

You're like a religious cult, trying to convert people...for what? It doesn't benefit you any, in fact if it was so perfect and all these clearly stupid people would just jump to linux they'd be no need for tech support seeing as how it's so perfect...oh wait Everything *NIX is FILLED with threads asking how to do simple tasks under windows and It came from Redmond is FILLED with 'fun' threads like post your desktop...

[Zok]

Originally Posted by Prometheum

The main difference between this and an M$ bug is that this will get fixed, pronto, whereas M$ would have sat on it, sued the people who disclosed it, ignored anyone who brought it to their attention, and released another buggy fix months later after someone's botnet had swelled sufficiently.

This exactly. When bugs/holes are found in linux software, they get fixed MUCH faster because people can actually view the source code to look for those bugs. It gets found faster and gets fixed faster.

I didn't even know of the bug until someone mentioned it to me yesterday. I go home to apply a patch and debian already did it for me. I didn't have to do shit.

[Prometheum]

Originally Posted by Trousersnake

You are by defending a piece of software to the core. There were other flaws of linux on that news site, you can look for them and retort to them all in a longwinded manner, I just mosted the headlining one.

I wasn't retorting the hole, I was retorting your own dumbass ideas. "Most bulletproof does not mean bulletproof." No piece of software is bulletproof and given time, an exploit could be found in every last one. My point was, while you might want to jump on every hole in a GNU/Linux distro, M$'s pile of shit has orders of magnitude more, and that's just known holes.

And you're calling me a fanboy because I'm responding to you logically? You are a troll.

Originally Posted by Trousersnake

redjoker: You're a dumbass, how is this trolling? The OS of choice for people anti Microsoft for whatever reason has downfalls like any other dispite all promoters saying it's perfect.

Hello, Mr. Straw Man.

Originally Posted by Trousersnake

You're like a religious cult, trying to convert people...for what? It doesn't benefit you any, in fact if it was so perfect and all these clearly stupid people would just jump to linux they'd be no need for tech support seeing as how it's so perfect...oh wait Everything *NIX is FILLED with threads asking how to do simple tasks under windows and It came from Redmond is FILLED with 'fun' threads like post your desktop...

Actually, here are the top five threads from Redmond:

some bogus issue with microsoft, needing help
Problem with windows explorer service
Serious Computer Problems(Long)($ For Solutions)
Why is Vista So J3wish?!
Vista was designed to annoy users.

In fact, the last "Post your desktop" thread was last posted in in 2007.

But anyways, being trolled...

We aren't a cult. We're advocates. Some of us advocate for pragmatic reasons, some of us advocate for ethical reasons. I believe that it is unethical to use, promote, or distribute proprietary software. I have just about the same reasons as everyone else who feels the same, and I don't feel the need to explain that here. I try to get people to switch because they'll have more freedom. They'll also have to deal with much less security and stability holes, regardless of how many times you link to bugtraq.

GNU/Linux is easy. This hole has nothing to do with usability in the slightest. It affects servers and users that generate SSH keys. And even though secuirty = -(usability), distros like Ubuntu manage to be easy while still being "secure by default". You can't hack a Ubuntu box just after install -- it has no remote services on it and any that are installed have to be put through the firewall. As opposed to a fresh XP install, which is vulnerable "out of the box".

Its easy to see why people think you're a troll. You're an idiot.

Originally Posted by Zok

This exactly. When bugs/holes are found in linux software, they get fixed MUCH faster because people can actually view the source code to look for those bugs. It gets found faster and gets fixed faster.

I didn't even know of the bug until someone mentioned it to me yesterday. I go home to apply a patch and debian already did it for me. I didn't have to do shit.

Yup. Before OP made his post, we were all patched.

In the meantime, RPC-DCOM is um, still open.

Quit feeding the troll. He obviously doesn't have the slightest clue about what he's talking about.

[Prometheum]

Originally Posted by redjoker

Quit feeding the troll. He obviously doesn't have the slightest clue about what he's talking about.

No, if he didn't have any idea what he was talking about, he'd be an idiot. Trolls intentionally act like idiots or in another manner to get people incensed. Idiots are just idiots.

And sadly, there are idiots that think slightly like him. Most of them are windows fanboys, but if you shoot down one, they all feel it. So sometimes it can be valuable to allow yourself to be trolled.

I see your point. Or we could just release a new worm and see which OS is best.

[Trousersnake]

Prometheum...nice self labelling yourself and other people like yourself as 'advocates'

You're calling me an idiot despite missing the point, linux fanboys pulling power - being 'bulletproof' has taken a big ol' punch to the face (not to the back like windows gets by spineless cockheads )

No one [that matters] cares it has been fixed. You may as well call it Windows now if this word spreads...which I sincerely hope it does.

Linux has absolutely no drawing cards next to its name now for 'ordinary people' besides the fact that it is free, but then people give non-working cars away for nothing I suppose. "Take our burden...you love it!"

What are you going to, in all honesty going to say for Linux now? That there are some free distros and that if you have issues with Microsoft you certainly won't with Linux? Give me a fucking break. I'll go on a limb here and say I've been bullshitted about this crap for longer than you've been alive.

Linux hasn't done a damn thing, Apple was selling shitloads of machines after a few years and they had to make th fucking machines not just the software.

I'll come back in 20 years and see how far your 'movement' has advanced.

Originally Posted by redjoker

I see your point. Or we could just release a new worm and see which OS is best.

Go ahead, oh what's that? You won't? Didn't think so, you linux people are all alike, all mouth and no backbone.