Flaw pops up in Linux kernel

TalkBack 24 of 125:

Next »

« Previous

• Thread View
• Flat View

My point is windows shouldn't be mentioned

Sam's post was that windows kernel doesn't suffer the fate
of Linux kernel with these vulnerabilities (ie "any known
kernel security holes"). My point is windows kernel is a
security hole when given local access to the server
(even if as a restricted user).

"of course it would be far easier on windows, but you wernt
talking about ease, you were just talking about whats
possible."

My point is that is is not only easier, but that it is NOT
preventable on windows and should be prevented under
Linux.

"1 seems easy"

I'm horrified that of the options presented you believe
bringing down the server seems easy. The example given in
the article of using all available resources is actually
preventable using limits for what a user can do (memory,
processes, disk usage).

"two seems almost impossible"

It should be impossible, under a *nix style OS, given that
known vulnerabilities have been patched. However it is a
given under windows.

"I'm not sure about 3"

Should also be preventable by enforced limits on resource
usage (eg bandwidth).

The point is *nix, including Linux, has these features and
windows doesn't. Whilst it is disappointing such a
vulnerability was discovered in Linux, given the deficiencies
in windows it shouldn't be mentioned in these discussions.

"a more drastic comparison would have been with remote
exploits, very few of those have ever popped up on linux."

True, but Sam and my posts were about the kernel. A
remote exploit for Apache is likely to effect either
architecture.

Windows experiences more remotely exploitable bugs than
a stripped down GNU/Linux server purely because of the
non-removable crap thrown in by MS (eg peer-to-peer
gaming API for windows 2003 server).

Posted by: Richard Flude   Posted on: 06/15/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The New Generation of System X Servers: Lower datacenter costs through server refresh IBM Join Intel and IBM for a deep dive into the new Intel Xeon Processor 5500 ... Download Now
• Migrate Your Oracle Databases with Near-Zero Downtime Quest Software In today's economy, IT departments are asked to do more with less and stay ... Download Now
• Memory Analysis Best Practices Within Eclipse Quest Software Poor Java performance costs your business money and customers. However ... Download Now