Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Wed 11 Dec 2019, 12:27
All times are UTC - 4

 Forum index » Off-Topic Area » Security
Firefox, Adobe top buggiest software list
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [6 Posts]  
Author Message
clarf


Joined: 13 Jun 2007
Posts: 614
Location: The old Lone Wolf
PostPosted: Fri 18 Dec 2009, 12:24    Post subject:  Firefox, Adobe top buggiest software list
Subject description: When enemy is inside the GPL		  
Something to think about GPL software

http://news.cnet.com/8301-27080_3-10417785-245.html
Back to top
View user's profile Send private message 
disciple

Joined: 20 May 2006
Posts: 6995
Location: Auckland, New Zealand
PostPosted: Fri 18 Dec 2009, 16:27    Post subject:  
Not exactly high-quality journalism:
"vulnerabilities" ≠ "bugs"
"vulnerabilities" ≠ actual exploits
I guess at least they recognise that:
"reported vulnerabilities" ≠ "vulnerabilities"
_________________
Do you know a good gtkdialog program? Please post a link here

Classic Puppy quotes

ROOT FOREVER
GTK2 FOREVER
Back to top
View user's profile Send private message 
disciple

Joined: 20 May 2006
Posts: 6995
Location: Auckland, New Zealand
PostPosted: Fri 18 Dec 2009, 16:31    Post subject:  
Maybe I've been living in a Linux cave for too long:
Quote:
The numbers illustrate the trend of attackers turning their focus away from operating systems and toward applications, Kandek said.

They don't mention any evidence for this... is it true?

Code:
"Operating systems have become more stable and harder to attack and that's why attackers are migrating to applications, he said. "Adobe is a huge focus for attacks now, around 10 times more than Microsoft Office.

Microsoft Office isn't an operating system... and since when was it a huge focus for attacks? The focus used to be Windows via Internet Explorer.
_________________
Do you know a good gtkdialog program? Please post a link here

Classic Puppy quotes

ROOT FOREVER
GTK2 FOREVER
Back to top
View user's profile Send private message 
disciple

Joined: 20 May 2006
Posts: 6995
Location: Auckland, New Zealand
PostPosted: Fri 18 Dec 2009, 16:33    Post subject:  
Quote:
Something to think about GPL software.

Yes: "don't use GPL software, they'll actually confess to all the bugs when they fix them".
I want to hear from someone who's actually suffered from one of these vulnerabilities in Firefox being exploited...
_________________
Do you know a good gtkdialog program? Please post a link here

Classic Puppy quotes

ROOT FOREVER
GTK2 FOREVER
Back to top
View user's profile Send private message 
clarf


Joined: 13 Jun 2007
Posts: 614
Location: The old Lone Wolf
PostPosted: Fri 18 Dec 2009, 18:35    Post subject:  
disciple wrote:
Not exactly high-quality journalism:
"vulnerabilities" ≠ "bugs"
"vulnerabilities" ≠ actual exploits
I guess at least they recognise that:
"reported vulnerabilities" ≠ "vulnerabilities"


You are totally right disciple,

vulnerabilities = security risk.

A vulnerability with some instances of working and fully-implemented attacks is classified as an exploit.
Back to top
View user's profile Send private message 
clarf


Joined: 13 Jun 2007
Posts: 614
Location: The old Lone Wolf
PostPosted: Fri 18 Dec 2009, 18:44    Post subject:  
disciple wrote:
Maybe I've been living in a Linux cave for too long:
Quote:
The numbers illustrate the trend of attackers turning their focus away from operating systems and toward applications, Kandek said.

They don't mention any evidence for this... is it true?

Code:
"Operating systems have become more stable and harder to attack and that's why attackers are migrating to applications, he said. "Adobe is a huge focus for attacks now, around 10 times more than Microsoft Office.

Microsoft Office isn't an operating system... and since when was it a huge focus for attacks? The focus used to be Windows via Internet Explorer.


Although they don´t mention any evidence, in Windows side is totally clear that focusing in Internet Explorer is a fast way to attack the Operating System (as you already pointed), IE is integrated in Windows kernel making it the big gate for any attack.

With that in mind Microsoft had doing many changes to IE security, many features are default disabled and many program Permissions blocked. I must add that with default settings I can´t use IE for many enterprise Web applications. The worst thing is I Usually have to force the lowest security setting to make things work, even setting a trusted site is not enough for single signon authentication or Scripts executions. I don´t have such problems with Firefox.
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [6 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

[ Time: 0.0525s ][ Queries: 12 (0.0215s) ][ GZIP on ]