[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain -->
- <!--x-date: Thu Jun 2 11:53:14 2005 -->
- <!--x-from-r13: wnzrf.fhzaref ng tznvy.pbz (Xnzrf Ehzaref) -->
- <!--x-message-id: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-subject: [ale] Debian 3.0 as a server platform? -->
- <li><em>date</em>: Thu Jun 2 11:53:14 2005</li>
- <li><em>from</em>: james.sumners at gmail.com (James Sumners)</li>
- <li><em>in-reply-to</em>: <<a href="msg00084.html">[email protected]</a>></li>
- <li><em>references</em>: <<a href="msg00081.html">[email protected]</a>> <<a href="msg00082.html">[email protected]</a>> <<a href="msg00084.html">[email protected]</a>></li>
- <li><em>subject</em>: [ale] Debian 3.0 as a server platform?</li>
On 6/2/05, Stuffed Crust <pizza at shaftnet.org> wrote:
> On Thu, Jun 02, 2005 at 11:27:02AM -0400, John Wells wrote:
> > Stuffed Crust said:
> > > Also, it's not "known working, secure, packages". What you're really
> > > saying translates to: "fairly well known set of unfixed bugs with more
> > > unkown bugs lurking", as opposed to "known bugs fixed with unknown bugs
> > > lurking"
> >
> > Are you saying that known bugs typically go unpatched on Debian? Surely
> > they have security updates issued?!
>
> As I said in the very next paragraph:
>
> "Playing the security card here is nonsensical, as security fixes are
> just a special case of unknown bug, and they're fixed post-hoc as they
> are discovered."
>
> Yes, Debian-Stable promptly patches security bugs, and that's all they
> do. But everyone else fixes security bugs too, so it's not like Deb
> Stable's policy of fixing their bugs via backports vs new upstream
> releases makes their software any more secure, as an unknown (security)
> bug is still by definition an unknown bug. This policy makes their
> software more stable, however.
>
> Stable software is not necessarily secure.
>
> Deb Stable's policy of backporting security fixes makes sense; however
> it needs to be coupled with more frequent releases to be truly useful
> for someone with relatively modern needs. If someone has to resort to
> packages (or the whole tree) from -testing or -unstable, the "stability"
> benefits go right out the window, but you can do many more things.
>
> - Pizza
> --
> Solomon Peachy ICQ: 1318344
> Melbourne, FL JID: pitha at myjabber.net
> Quidquid latine dictum sit, altum viditur
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> <a rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale">http://www.ale.org/mailman/listinfo/ale</a>
>
>
>
--
James Sumners
<a rel="nofollow" href="http://james.roomfullofmirrors.com/">http://james.roomfullofmirrors.com/</a>
"All governments suffer a recurring problem: Power attracts
pathological personalities. It is not that power corrupts but that it
is magnetic to the corruptible. Such people have a tendency to become
drunk on violence, a condition to which they are quickly addicted."
Missionaria Protectiva, Text QIV (decto)
CH:D 59
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00087" href="msg00087.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00089" href="msg00089.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00081" href="msg00081.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
<li><strong><a name="00082" href="msg00082.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> jb at sourceillustrated.com (John Wells)</li></ul></li>
<li><strong><a name="00084" href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00086.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00087.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00085"><strong>Date</strong></a></li>
<li><a href="threads.html#00085"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>