[ale] Sunday 05-22-05 6PM RUN-AS-ROOT CHALLENGE

[George Carless]

> We would have to start an entire discussion on "box security" - for example, I 
> would have to list the things that I have done to prevent my box from being 
> used to attack others. Nonetheless, I can still run as root.

How on earth is it that you now believe this is an entire separate discussion?  And why do 
you consider it a "secondary issue"?

> If you really want to discuss the secondary issue of "world security" first 
> start another thread. Next, take into account that WE are using Linux - and 
> thus much less likely to have harmful boxes OR cause a global problem in the 
> first place. Time would be better spent running PSAs about computer security 
> on M$ boxes than spending time arguing with me about running as root.

No!  We are only less likely to have harmful boxes etc. IF we are not running as root and 
if we are applying other best practices!

> Seems like people keep forgetting the Linux factor of this discussion. People 
> cannot post about the security benefits (root or non-root) in this forum and 
> dog M$ and then act as though Linux is every bit as INsecure just by running 
> as root. I, for one, have more respect for the operating system than that.

In many respects, your respect is therefore misplaced.

--George
--------------------------------------
George Carless ... kafka at antichri.st
Words are just dust in deserts of sound