Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread markw
> ma...@mohawksoft.com said on Fri, 31 May 2024 09:37:38 -0400 > > > >>The xz thing is totally different. That was a masterful bit of >>espionage. It was two years in the making, and if we don't think this >>is elsewhere as well, unrelated to systemd, then I'm sure we are >>kidding ourselves. > > H

Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread markw
> And this is all entirely irrelevant to the XZ supply chain attack, > because the backdoor isn't in the source code. It's in the test > harness. If you used 'git clone' then you would never see it because > the payload was excluded by the .gitignore file. You had to use the > tarball, and you ha

Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread Rich Pieri
On Mon, 3 Jun 2024 08:41:31 -0400 ma...@mohawksoft.com wrote: > Like I said, I understand what systemd is intended to do and it is not > without merit, but it is the most "Windows" of all the code in unux. Correction: it's the most Macintosh. systemd started life as a knock-off of Apple's launchd

Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread markw
> On Mon, 3 Jun 2024 08:41:31 -0400 > ma...@mohawksoft.com wrote: > >> Like I said, I understand what systemd is intended to do and it is not >> without merit, but it is the most "Windows" of all the code in unux. > > Correction: it's the most Macintosh. systemd started life as a knock-off > of App

Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread Rich Pieri
On Mon, 3 Jun 2024 15:58:57 -0400 Steve Litt wrote: >> >Numbers of lines of code does not correlate with attack surface. > That's exactly what I said, except I used the word correlate. You said there is a correlation even if it's not 1:1. I said that no such correlation exists. It's a myth.

[Discuss] Kaspersky KVRT

2024-06-03 Thread Rich Pieri
Announced today on Bleeping Computer. Anyone here try it out, yet? https://www.kaspersky.com/downloads/free-virus-removal-tool -- \m/ (--) \m/ ___ Discuss mailing list Discuss@driftwood.blu.org https://driftwood.blu.org/mailman/listinfo/discuss

Re: [Discuss] Debian 12 in the Cloud

2024-06-03 Thread Steve Litt
Rich Pieri said on Mon, 3 Jun 2024 17:46:23 -0400 >On Mon, 3 Jun 2024 15:58:57 -0400 >Steve Litt wrote: > >>> >Numbers of lines of code does not correlate with attack surface. >>> > >> That's exactly what I said, except I used the word correlate. > >You said there is a correlation even if it's