[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain -->
- <!--x-date: Thu Jun 2 11:48:37 2005 -->
- <!--x-from-r13: cvmmn ng funsgarg.bet (Eghssrq Qehfg) -->
- <!--x-message-id: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-subject: [ale] Debian 3.0 as a server platform? -->
- <li><em>date</em>: Thu Jun 2 11:48:37 2005</li>
- <li><em>from</em>: pizza at shaftnet.org (Stuffed Crust)</li>
- <li><em>in-reply-to</em>: <<a href="msg00082.html">[email protected]</a>></li>
- <li><em>references</em>: <<a href="msg00081.html">[email protected]</a>> <<a href="msg00082.html">[email protected]</a>></li>
- <li><em>subject</em>: [ale] Debian 3.0 as a server platform?</li>
As I said in the very next paragraph:
"Playing the security card here is nonsensical, as security fixes are
just a special case of unknown bug, and they're fixed post-hoc as they
are discovered."
Yes, Debian-Stable promptly patches security bugs, and that's all they
do. But everyone else fixes security bugs too, so it's not like Deb
Stable's policy of fixing their bugs via backports vs new upstream
releases makes their software any more secure, as an unknown (security)
bug is still by definition an unknown bug. This policy makes their
software more stable, however.
Stable software is not necessarily secure.
Deb Stable's policy of backporting security fixes makes sense; however
it needs to be coupled with more frequent releases to be truly useful
for someone with relatively modern needs. If someone has to resort to
packages (or the whole tree) from -testing or -unstable, the "stability"
benefits go right out the window, but you can do many more things.
- Pizza
--
Solomon Peachy ICQ: 1318344
Melbourne, FL JID: pitha at myjabber.net
Quidquid latine dictum sit, altum viditur
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00085" href="msg00085.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> james.sumners at gmail.com (James Sumners)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00081" href="msg00081.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
<li><strong><a name="00082" href="msg00082.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> jb at sourceillustrated.com (John Wells)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00083.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00085.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00083.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00085.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00084"><strong>Date</strong></a></li>
<li><a href="threads.html#00084"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>