Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5768

Re: package for security advice

From Jonathan Hutchins <hutchins@tarcanfel.org>
Newsgroups linux.debian.security
Subject Re: package for security advice
Date 2020-03-07 19:10 +0100
Message-ID <zHM3D-81g-5@gated-at.bofh.it> (permalink)
References <zHE65-370-1@gated-at.bofh.it>
Organization Tarcanfel

Show all headers | View raw


The only way to achieve real security is through knowledge.  Pressing a 
shiny automated button is just going to implement what somebody else 
thinks is good for the system they assume you're running.  Find the 
security websites, podcasts, newsletters, books.  Learn what you really 
need to do for your actual case, not what somebody else thinks you 
should do.  Learn what is superstitious paranoia that will never even 
come close to a private personal system.

If you're going to run a public web server, mail server, or whatever, 
one run of a script is not going to keep you secure.  You need to know 
what the actual attack vectors can be, and need to be prepared for a 
threat that nobody's thought of yet.

Microsoft tells you all you have to do is click the little check box 
that turns on the security they've built and you're all safe.

Microsoft lies.

Read.

-- 
Jonathan

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

package for security advice Russell Coker <russell@coker.com.au> - 2020-03-07 10:40 +0100
  Re: package for security advice Patrick Schleizer <adrelanos@riseup.net> - 2020-03-07 12:10 +0100
  Re: package for security advice Florian Weimer <fw@deneb.enyo.de> - 2020-03-07 13:00 +0100
  Re: package for security advice Paul Wise <pabs@debian.org> - 2020-03-07 13:10 +0100
    Re: package for security advice "vince@vheuser.com" <vince@vheuser.com> - 2020-03-07 13:50 +0100
      Re: package for security advice Russell Coker <russell@coker.com.au> - 2020-03-07 14:30 +0100
  Re: package for security advice Jonathan Hutchins <hutchins@tarcanfel.org> - 2020-03-07 19:10 +0100
    Re: package for security advice Noah Meyerhans <noahm@debian.org> - 2020-03-07 19:30 +0100
      Re: package for security advice "vince@vheuser.com" <vince@vheuser.com> - 2020-03-07 20:20 +0100
      Re: package for security advice Jonathan Hutchins <hutchins@tarcanfel.org> - 2020-03-08 00:20 +0100
  Re: package for security advice Noah Meyerhans <noahm@debian.org> - 2020-03-07 20:10 +0100

csiph-web