Path: csiph.com!news.mixmin.net!news.albasani.net!.POSTED!not-for-mail
From: Andreas Kohlbach <ank@spamfence.net>
Newsgroups: comp.os.linux.misc
Subject: Re: Wikileaks Vault7 release--Linux vulnerabilities
Date: Fri, 10 Mar 2017 13:15:40 -0500
Organization: albasani.net
Lines: 25
Message-ID: <87k27xc81f.fsf@usenet.ankman.de>
References: <ebd4396c-80bb-4f5c-9a23-ce7c4032d32b@googlegroups.com> <alpine.LNX.2.02.1703081604540.29335@darkstar.example.org> <8737emqk2i.fsf@usenet.ankman.de> <87fuimayix.fsf@LkoBDZeT.terraraq.uk> <alpine.LNX.2.02.1703091740050.31879@darkstar.example.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Trace: news.albasani.net 8NHASBgxtzqDIkxXT20FBmY/hAPff4CtnaDwCdMxt2nyS0ooCOXeEXLb04I63NmYBuBtn5VeKP265YhvSQtNog==
NNTP-Posting-Date: Fri, 10 Mar 2017 18:15:41 +0000 (UTC)
Injection-Info: news.albasani.net; logging-data="OrG0AE1nOK/Np8L48lLh5YWCQLstX76HAVzwGr7AJwqMKmMZDVjUS+JhjF6W8x0bkfMY1XM1lGDvdVIfmyBhugRI1/qPat3wHKmEQXmUFBAF8Gj945Dxfpbjg3RKzwLW"; mail-complaints-to="abuse@albasani.net"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
X-Face: '#R~-oJz-_!iXhczPJ;=w1(`5-uQ2$0qHB7KKDV,]VoAC!P?swaa#m|eB<DkOt*XH=~9C[g S^w)b,)1q,{P\7Z3H,N(^m.YKuYM//B{X:PvbDk.|:g:$wVr*3*)[K6F+k\z-s32+oB]YJPy11wuGGz'bQAk~1.b1[;M{^A2@bboIENBB:Wd:<Fm~r7OuiJA1g}7KC-T'>Du+
Cancel-Lock: sha1:iHiKPGBkKjBmoN+WGIf/Tf5WMDg= sha1:j4ob4b7EFlyT9vQYMD3JUdee8Hk=
X-Face-What-Is-It: Capture Bee from Galaga
Xref: csiph.com comp.os.linux.misc:19463

On Thu, 9 Mar 2017 17:44:40 -0500, Michael Black wrote:
>
> On Thu, 9 Mar 2017, Richard Kettlewell wrote:
>
>> The previous poster should read a vulnerability mailing list sometime,
>> there is a firehose of vulnerabilities in operating system and
>> application software. If you remain vulnerable to a published
>> vulnerability with an automatable update available then blaming the
>> user/administrator might be realistic, otherwise it’s just bizarre.
>>
> It was sort of a joke.
>
> But also, anyone can run Linux.  So there must be lots of systems
> where the adminstrator, ie the user, isn't keeping up.  The original
> post mentions operating systems more for users than servers, so a lot
> of that probably does rest with the "administrator", which is actually
> the user.

Haven't set up a new Linux for a while. But don't new installations not
usually have auto-updates by default? So that they just update
transparently for their users?
-- 
Andreas
You know you are a redneck if
you ever been involved in a custody fight over a hunting dog.