Re: Fix Security (was: Paging file)

["Dennis Lovelady" <dlovelady@xxxxxxxx>]

Hi, Leif:

I've been reading this topic with interest.... almost every word, in fact,
'cuz it's a slowish day.

I had to smile when I read this:
> Unix is pretty secure. Linux too. The buffer overflow
> problems are not platform problems, but sloppy
> programming.

Now, don't get angry, just smile with me, huh?  But it seems funny that
"pretty secure" is OK for you to use in this context, but not acceptable
when discussing the iSeries and SLS.  Isn't that interesting?  :)

Actually, I'm inclined to agree with most of what is being said on the
topic (including the security of *nix)... I don't think anyone's blatantly
off the mark... and it comes down to cost.  (This from the Department of
Redundancy Department.)

Dennis






"Leif Svalgaard" <leif@leif.org>@midrange.com on 10/29/2002 11:24:40 AM

Please respond to midrange-l@midrange.com

Sent by:    midrange-l-admin@midrange.com


To:    <midrange-l@midrange.com>
cc:
Subject:    Re: Fix Security (was: Paging file)


From: Booth Martin <Booth@MartinVT.com>
> One point I wish you would make for my benefit though is: Who's doing
> security better, in a commercial environment?

well, I said that I don't want to get into the "better" debate.
The original discussion was about SLS and the danger
this architecture poses if you have broken in.

Commercial environment? Hmm, what commercial
environments are there? AS/400. IBM/360 (RACF). GCOS8
(that one is pretty secure - build on Multics). Various
obsolete mainframes from Unisys, Burroughs, etc.

Unix is pretty secure. Linux too. The buffer overflow
problems are not platform problems, but sloppy
programming.