Dailydave mailing list archives

Re: Theo's presentation on exploit prevention


From: Chris Kuethe <chris.kuethe () gmail com>
Date: Mon, 13 Sep 2004 19:14:46 -0600

On Mon, 13 Sep 2004 17:41:41 -0700, Rodney Thayer
<rodney () canola-jones com> wrote:
At 02:33 AM 9/14/2004 +0200, Halvar Flake wrote:
Remember that writing exploits is rarely a game of a single bug.

remember also that OpenBSD can be a pain in the ass to use
because of Theo's theological attitude.  Is it really worth
it to go through the pain of using that rather than some other
modern Unix clone?  You gotta ask.

I can't believe you are asking (or at least bringing it up to us) -
it's a matter of the right tool for the job (as well as some personal
preference). It wouldn't be adviable to try run peoplesoft (and all
that entails) on some squiddy old dual p2, and it would be equally
silly to put a V880 with trusted solaris and mysql in your basement to
run your blog. Some things just seem to fit better a certain way. And
then there's personal preference: a bazillion different linux distros
and growing handful of bsd systems, each one has a different feel that
a different audience appreciates.

One web guy I recently spoke to has a farm of IIS/ColdFusion
webservers because he doesn't want go through the pain of php and
apache, yet he uses OpenBSD or OS X for the fileservers because he
prefers the way those are managed.

And yes, I did catch the theology pun.

-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave


Current thread: