Slashdot Mirror

Really? seems to differ and wasn't the only reference I could find for microsoft.com defaced (seventh link).

SQL injection != Kernel Flaw

Not an example of bad security but bad programming.

http://www.xatrix.org/article.php?s=3640
"They found the administration page and performed a SQL injection attack, allowing them to manage the content of the section."

OMG!!! Linux is SUPAR UNSAFE!!! It is vulnerable to SQL injection attacks!... Every OS has this issue because some moron decided to not validate their SQL string and/or didn't use parameterized variables.

Actually, I went through and googled a bunch myself and all the results for the past decade where SQL injection or they didn't specify but mostly SQL.

Next time you feel like showing off how un-secure and OS is, I'll load up SELinux, set it up to let root telnet in, give root a blank password, open up all the ports on my firewall and see how long it takes for SELinux to be "hacked"

I'm mirroring it on my site.

Is anybody reading slashdot truly stupid enough to believe that if Firefox had an 80% market share it wouldn't be just as readily targetted and exploited? It is really easy to wagon jump, and thats fine based on performance and features, especially if a feature is security. But rest assured that magic guaranteed security is itself a feature of low adoption, and an illusion. Firefox is definitely getting popular, it doesn't even hang or die much anymore. Keep in mind that it only takes 1 exploit to destroy a user's machine and either destroy or steal their data. Would you rather have a gun to your head with 1 bullet in it, or with 15? Can you answer that seriously?

Firefox, god's answer to the internet, shoots lightning bolts outta its arse. Safe beyond safe, if you're a sucker.

2005
http://blogs.zdnet.com/Ou/index.php?p=103

2006
http://www.informationweek.com/news/showArticle.jh tml?articleID=179101966
http://sunbeltblog.blogspot.com/2006/04/pssstyou-w anna-see-firefox-exploit-in.html
http://www.eweek.com/article2/0,1759,1814056,00.as p
http://www.xatrix.org/article.php?s=4447
http://www.techworld.com/security/news/index.cfm?n ewsID=6554&pagtype=all
http://hackcraft.wordpress.com/2006/08/02/firefox- exploit-exposed-by-hackers/

Xatrix has a news article with some of the changes in RC2: http://www.xatrix.org/article.php?s=4181

I noticed a smaller memory consumption.

Wow very few remote exploits
Well I feel much better now. Unix might have less high profile automated attacks against it, but don't kid yourself into thinking its any safer on the Internet then anything else.

Its not like I really had to look hard either, it took longer to write the little HTML in this post. Results 1 - 10 of about 150,000 for remote linux root exploits. (0.30 seconds)

Linux Online didn't look very hard. Their big problem is with "Casino of the Sun", which is operated by Grafix Softech in San Juan, Puerto Rico. They're a real company with real assets, run by Tej Kohli and Juan Bonilla. They're even hiring sysadmins.

Does anyone remember CodeGreen?

This was a worm that propagated like CodeRed, but instead of diong malicious things, it patched the insecure system.

There's also CRclean, which does the same, but only to machines that attempt to infect it first.