Cory Petkovsek wrote:

> ------------------------------------------------------------------------
> The Debian Project                                http://www.debian.org/
> Debian Investigation Report                             [EMAIL PROTECTED]
> December 2nd, 2003
> ------------------------------------------------------------------------


Darn!  You beat me again!  (-:

Anyway, I wanted to point out that hundreds of sites are broken into
every day around the world, but very few are so scrupulously public
about letting their customers know what happened, how it was cleaned
up, and what's being done to keep it from happening again.  Only a
hardcore open source group would do it that way.

Debian will, of course, benefit from massively parallel peer review on
this incident.  If they left anything open (unlikely, IMO), somebody
will notice and call them on it.

And every Linux geek in the world has just had a vivid reminder of the
dangers of logging in through unsecured hosts.  That will help Linux
security too.

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     [EMAIL PROTECTED]
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to