[LINK] Security of old RedHat systems

[Craig Sanders]

On Mon, Dec 13, 2004 at 01:26:47PM +1100, Adam Todd wrote:
> At 12:49 13/12/2004 +1100, Craig Sanders wrote:
> >On Mon, Dec 13, 2004 at 11:14:43AM +1100, Adam Todd wrote:
> >> But Robin, my advice, if it's working, don't fix it. You have firewall
> >> processes in place, you're a smart cookie, you'll know if something
> >> isn't right, then fix it.
> >
> >this is extraordinarily bad advice. believing "i'm too good to be
> >hacked" is bogus, it's just begging to be cracked. no amount of skill
> >will protect you if you don't bother to update your systems regularly.
> 
> No it's not advice, it's a statement I made based on my knowledge of Robin, 

"But Robin, my advice,..."  -- that certainly looks like advice to me.  

but what would i know? i live in the real world, not loony paranoid fantasy
delusion world.

> his abilities, his attention to detail, his care, consideration and 
> observation of his computers and operating system management and his 
> understanding of technology.

all of those things are irrelevant.  if you don't upgrade and install security
patches regularly, you WILL get hacked.  NO MATTER *HOW* GOOD YOU ARE (OR
AREN'T).

i made no comment at all, disparaging or complimentary, on Robin's
skills because it's not in the least bit relevant. in fact, i believe
his skill levels are relatively high - much higher than yours, for
example. he has certainly demontrated the ability to secure a secure.
but ability means nothing if you don't actually use it to upgrade past
security bugs.

> He might not be "The worlds greatest Geek" but [...]

again, irrelevant.

craig

-- 
craig sanders <cas at taz.net.au>           (part time cyborg)