Slashdot Mirror
Red Hat Pushes For CC Certification By Year's End
Ridgelift writes "This article indicates Red Hat Linux is about to receive certification under the Common Criteria (CC) Scheme worldwide. This has been a long road for Red Hat, and 'once successfully certified in the UK, Red Hat products will be recognised as certified and approved by information security agencies from all 19 countries participating in the Common Criteria program.' This means Red Hat will sit alongside Sun Solaris, HP-UX and IBM's AIX."
Damn, just when I thought the certification had some value!
Engineering is the art of compromise.
Red Hat couldn't have pulled this off without technology stolen from SCO. It's a known fact that SCO owns IP on everything that makes linux useful.
drip...drip...
Excuse me, I've got sarcasm dripping from my chin...
Its pretty well common knowledge in the security community that Microsoft paid for that certification.
While I can't remember if it was specifically Windows 2000 with the Common Criteria or Windows NT with the Orange Book Cert, I do remember that the system configuration which won them the cert was with no network connection, no floppy drives, and no CDROM drives on the box that was tested. In essence, no non-keyboard input methods. (They couldn't guarantee the OS would stay clean long enough to get the cert.)
Basically, the certification was useless as soon as you configured the box to do any useful processing on the machine. Then again, many would say that is the same of Windows itself.
--Storm
That and your distros servers can't be broken into for at least six months...
KungFUnix proudly introduces CUP, Certified Unix Pimp certification. Now you too can study and memorize 50 common criteria books we select and get kickbacks from in order to achieve your goal of adding the word CUP to your signature.
NO EXPERIENCE NEEDED!
That's right act now and send us 2,000.00 (US), and we'll gladly present you with information on obtaining this new and exciting certification. So what can you do with a CUP certification:
- Impress your clueless CTO
- Impress friends
- Add the word CUP to CCNA, MCSE, or CISSP
- Use the cert for a dustrag
- Smoke a doob with the cert
shrugs Certs who needs em.MoFscker
How does a system where new security holes are discovered daily get this certification? Can it be revoked? Me thinks Windows Security is the world's second most rated oxymoron behind Microsoft Works!!!
Now that's distinquished company.
the main distinguishing charactaristic being that almost no-one uses them any more...
No that was only released on punchcards and not updated after. It doesn't count anymore.
then how bad does something have t be to not make it?
i hear WindowsME just missed CC by a whisker.
My problem? I was perfectly gruntled, until some numbnuts came by and dissed me.
The only secure Windows box is the one that I planted my flowers in. No, wait, that fell off and fell two stories onto the footpath (sidewalk for the en_US folks)
it is only after a long journey that you know the strength of the horse.
Microsoft: This is WinME, we claim it is shit.
CC Official:sniff, sniff. Yep, sure is. Stamp!
Engineering is the art of compromise.
"Common Criteria is about validating that the OS/Firewall/etc. etc. does what the VENDOR says it will do."
Microsoft: "This operating system has numerous vulnerability exploits and poor compatability with old drivers and applications."
CC board: "Well, whaddaya know, so it does!"
LOL! True, very true. At least with Microsoft we can be assured of timely secure patches being released when a vulnerability crops up. Without corporations there would be chaos!
Are you some kind of retard?
The KDE.org folks can leverage this to get Kommon Kriteria certification...