From owner-freebsd-current@FreeBSD.ORG Thu Dec 10 16:02:38 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BC9D71065670 for ; Thu, 10 Dec 2009 16:02:38 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outB.internet-mail-service.net (outb.internet-mail-service.net [216.240.47.225]) by mx1.freebsd.org (Postfix) with ESMTP id A2A018FC0C for ; Thu, 10 Dec 2009 16:02:38 +0000 (UTC) Received: from idiom.com (mx0.idiom.com [216.240.32.160]) by out.internet-mail-service.net (Postfix) with ESMTP id CC9A4961CA; Thu, 10 Dec 2009 08:03:21 -0800 (PST) X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (h-67-100-89-137.snfccasy.static.covad.net [67.100.89.137]) by idiom.com (Postfix) with ESMTP id D6A4E2D6013; Thu, 10 Dec 2009 08:02:37 -0800 (PST) Message-ID: <4B211BAB.4030301@elischer.org> Date: Thu, 10 Dec 2009 08:02:51 -0800 From: Julian Elischer User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: Anton Shterenlikht References: <20091210144141.GB834@mech-cluster241.men.bris.ac.uk> In-Reply-To: <20091210144141.GB834@mech-cluster241.men.bris.ac.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-current@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Root exploit for FreeBSD X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2009 16:02:38 -0000 Anton Shterenlikht wrote: >>From my information security manager: > > FreeBSD isn't much used within the University (I understand) and has a > (comparatively) poor security record. Most recently, for example: > > http://www.h-online.com/security/news/item/Root-exploit-for-FreeBSD-873352.html yeah we know, but really, quoting security as a reason not to use it is a bit like quoting flat tyres (British spelling to those USA'ns reading) as a reason to not buy a Jag. Every OS has them and in fact we are better than many. > > > > >