« first day (2548 days earlier)      last day (2324 days later) » 

MagicHat
MagicHat
12:22 PM
Have some mistake this question, https://security.stackexchange.com/questions/174967/how-fix-warnnings-from-debsecan?noredirect=1#comment336591_174967 ... ?

Im new in Information Security, start learn with Debian. I realy like know how my toys works, but im bumping on that question above...

How is possible start a "Stable" OS, with a big brand like "Debian", and first check with "Official tool" Debsecan acuses 100 vulnerabilyties?

Becouse im new i think some things like that:

- Is normal no problem...
 
 
3 hours later…
Rory Alsop
Rory Alsop
2:59 PM
@MagicHat some of the enterprise software I work with has hundreds of vulnerability fixes very single month
100 vulns for a large codebase is par for the course
Stable will never mean no vulnerabilities. It just means it is (relatively) stable
As in few code changes
Nightlies are not stable, but will likely have less vulnerabilities
You can fix to zero warnings, maybe...but that will not meanzero vulnerabilities
The aim is to assess the risk to you or your business from each one identified, and work out whether you need to remediate.
You can patch to fix, or add additional controls, or accept the risk - all decisions have pros and cons
 
AJ Henderson
AJ Henderson
3:39 PM
@RoryAlsop well aside from perhaps those one or two mathematically proven OSes that do almost nothing
 
Rory Alsop
Rory Alsop
True - I was only including common ones
 
AJ Henderson
AJ Henderson
@RoryAlsop hmm, some how I missed seL4 when it came out
$400 per line of code is still crazy though
even if high assurance stuff is often in the $1000 per line range
that's just a whole different type of software development I don't even want to dream of being involved with
 
Rory Alsop
Rory Alsop
I haven't played with seL for ages...
 
 
5 hours later…
Sergiy Kolodyazhnyy
Sergiy Kolodyazhnyy
9:13 PM
Any mods around ?
 
AJ Henderson
AJ Henderson
9:43 PM
@SergiyKolodyazhnyy I can possibly get ahold of one, what's up?
 
MagicHat
MagicHat
10:07 PM
@RoryAlsop tks for replay... I still building my security mind set. And speak with pros this gona be fast... Tks again.
 
 
1 hour later…
Sergiy Kolodyazhnyy
Sergiy Kolodyazhnyy
11:14 PM
@AJHenderson Well, there's one answer where OP promoted sort of their own application. Answer addressed the question, has disclosure, so it's pretty much within rules, though it may be suggestion to take further resolution with OP's issue off-site.
Just wondering if might be worth for mods to look into it
 

« first day (2548 days earlier)      last day (2324 days later) »