« first day (2548 days earlier)      last day (227 days later) » 

12:22 PM
Have some mistake this question, https://security.stackexchange.com/questions/174967/how-fix-warnnings-from-debsecan?noredirect=1#comment336591_174967 ... ?

Im new in Information Security, start learn with Debian. I realy like know how my toys works, but im bumping on that question above...

How is possible start a "Stable" OS, with a big brand like "Debian", and first check with "Official tool" Debsecan acuses 100 vulnerabilyties?

Becouse im new i think some things like that:

- Is normal no problem...
 
 
3 hours later…
2:59 PM
@MagicHat some of the enterprise software I work with has hundreds of vulnerability fixes very single month
100 vulns for a large codebase is par for the course
Stable will never mean no vulnerabilities. It just means it is (relatively) stable
As in few code changes
Nightlies are not stable, but will likely have less vulnerabilities
You can fix to zero warnings, maybe...but that will not meanzero vulnerabilities
The aim is to assess the risk to you or your business from each one identified, and work out whether you need to remediate.
You can patch to fix, or add additional controls, or accept the risk - all decisions have pros and cons
 
3:39 PM
@RoryAlsop well aside from perhaps those one or two mathematically proven OSes that do almost nothing
 
True - I was only including common ones
 
@RoryAlsop hmm, some how I missed seL4 when it came out
$400 per line of code is still crazy though
even if high assurance stuff is often in the $1000 per line range
that's just a whole different type of software development I don't even want to dream of being involved with
 
I haven't played with seL for ages...
 
 
5 hours later…
9:13 PM
Any mods around ?
 
9:43 PM
@SergiyKolodyazhnyy I can possibly get ahold of one, what's up?
 
10:07 PM
@RoryAlsop tks for replay... I still building my security mind set. And speak with pros this gona be fast... Tks again.
 
 
1 hour later…
11:14 PM
@AJHenderson Well, there's one answer where OP promoted sort of their own application. Answer addressed the question, has disclosure, so it's pretty much within rules, though it may be suggestion to take further resolution with OP's issue off-site.
Just wondering if might be worth for mods to look into it
 

« first day (2548 days earlier)      last day (227 days later) »