[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



On 6/2/05, Stuffed Crust <pizza at shaftnet.org> wrote:
> On Thu, Jun 02, 2005 at 11:27:02AM -0400, John Wells wrote:
> > Stuffed Crust said:
> > > Also, it's not "known working, secure, packages".  What you're really
> > > saying translates to: "fairly well known set of unfixed bugs with more
> > > unkown bugs lurking", as opposed to "known bugs fixed with unknown bugs
> > > lurking"
> >
> > Are you saying that known bugs typically go unpatched on Debian?  Surely
> > they have security updates issued?!
> 
> As I said in the very next paragraph:
> 
> "Playing the security card here is nonsensical, as security fixes are
>  just a special case of unknown bug, and they're fixed post-hoc as they
>  are discovered."
> 
> Yes, Debian-Stable promptly patches security bugs, and that's all they
> do.  But everyone else fixes security bugs too, so it's not like Deb
> Stable's policy of fixing their bugs via backports vs new upstream
> releases makes their software any more secure, as an unknown (security)
> bug is still by definition an unknown bug.  This policy makes their
> software more stable, however.
> 
>         Stable software is not necessarily secure.
> 
> Deb Stable's policy of backporting security fixes makes sense; however
> it needs to be coupled with more frequent releases to be truly useful
> for someone with relatively modern needs.  If someone has to resort to
> packages (or the whole tree) from -testing or -unstable, the "stability"
> benefits go right out the window, but you can do many more things.
> 
>  - Pizza
> --
> Solomon Peachy                                   ICQ: 1318344
> Melbourne, FL                                    JID: pitha at myjabber.net
> Quidquid latine dictum sit, altum viditur
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; 
&gt; 
&gt; 


-- 
James Sumners
<a  rel="nofollow" href="http://james.roomfullofmirrors.com/";>http://james.roomfullofmirrors.com/</a>

&quot;All governments suffer a recurring problem: Power attracts
pathological personalities. It is not that power corrupts but that it
is magnetic to the corruptible. Such people have a tendency to become
drunk on violence, a condition to which they are quickly addicted.&quot;

Missionaria Protectiva, Text QIV (decto)
CH:D 59


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00087" href="msg00087.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00089" href="msg00089.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00081" href="msg00081.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
<li><strong><a name="00082" href="msg00082.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> jb at sourceillustrated.com (John Wells)</li></ul></li>
<li><strong><a name="00084" href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
<ul><li><em>From:</em> pizza at shaftnet.org (Stuffed Crust)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00086.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00084.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00087.html">[ale] Debian 3.0 as a server platform?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00085"><strong>Date</strong></a></li>
<li><a href="threads.html#00085"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>