On Nov 9, 2011, at 9:06 AM, Jeff Kelley wrote:

> Code Red, on the other hand, could infect a
> server running IIS without user interaction.

On the third hand, the remote management bug could be exploited remotely 
without user intervention, via a process that was not only always running by 
default, but required for the Service Manager UI to work. Yours was a fine 
example, but this one was even worse. At least most windows machines aren't 
running IIS by default. And if you turn IIS off you don't lose basic, LOCAL, 
admin functionality.

My point is that level of insanely promiscuous entanglement of things that 
ought to be separate has simply never existed on UNIX, nor Linux, nor OS X.

-- 
Scott Ribe
[email protected]
http://www.elevated-dev.com/
(303) 722-0567 voice




_______________________________________________

Cocoa-dev mailing list ([email protected])

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to