From owner-freebsd-questions@FreeBSD.ORG Sat Jan 24 08:41:02 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A484216A4CE for ; Sat, 24 Jan 2004 08:41:02 -0800 (PST) Received: from smtp03.mrf.mail.rcn.net (smtp03.mrf.mail.rcn.net [207.172.4.62]) by mx1.FreeBSD.org (Postfix) with ESMTP id C7D6E43D49 for ; Sat, 24 Jan 2004 08:41:01 -0800 (PST) (envelope-from roberthuff@rcn.com) Received: from 209-6-197-67.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com ([209.6.197.67] helo=jerusalem.litteratus.org.litteratus.org) by smtp03.mrf.mail.rcn.net with esmtp (Exim 3.35 #4) id 1AkQWC-0000F0-00 for questions@freebsd.org; Sat, 24 Jan 2004 11:20:20 -0500 From: Robert Huff MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <16402.39748.31688.124380@jerusalem.litteratus.org> Date: Sat, 24 Jan 2004 11:20:20 -0500 To: questions@freebsd.org In-Reply-To: <000d01c3e253$ba3033f0$65a8a8c0@toshibauser> X-Mailer: VM 7.14 under 21.5 (beta15) "celery" XEmacs Lucid Subject: Re: Why BSD? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Jan 2004 16:41:02 -0000 Mark writes: > what about security between the two ? > which if either is better secure ? easier to secure ? > more likely to be cracked ? > lets say for newbies mostly. There's an old saying: "The least safe part of any car is the nut behind the wheel.". Both Linux and *BSD are quite secure ... if one takes the time to understand your security needs, investigates the tools necessary to address them, designs the solution correctly, and keeps everything up to date. If not, not. There really is no shortcut here. There are simple things one can do - like disabling unused services in inetd - but if one wants the real stuff (firewall, logging, secure sockets, fully encrypted remote access, intrusion detection and notification, et alia) then they should be prepared to do the work. Robert Huff