Re: [Hampshire] Www.kernel.org down

Top Page

Reply to this message
Author: Vic
Date:  
To: hampshire
Subject: Re: [Hampshire] Www.kernel.org down

> But what does that say about the DR procedures?


It says that they are not so arrogant as to presume that an unexpected
intrusion can be put right just by restoring the service that has shown
itself to be insecure...

> Most DR would hope to get some sort of service back online within 48
> hours.


It would be a simple matter to get the same service back up within 48
hours - and then someone will break in through exactly the same security
hole.

The kernel.org maintainers have got it right - understand the problem
before pretending it has been fixed.

Vic.