On 10 September 2011 18:56, Vic <lug@???> wrote:
>
>> But what does that say about the DR procedures?
>
> It says that they are not so arrogant as to presume that an unexpected
> intrusion can be put right just by restoring the service that has shown
> itself to be insecure...
>
>> Most DR would hope to get some sort of service back online within 48
>> hours.
>
> It would be a simple matter to get the same service back up within 48
> hours - and then someone will break in through exactly the same security
> hole.
>
> The kernel.org maintainers have got it right - understand the problem
> before pretending it has been fixed.
And more importantly than that, millions of people world wide use the
kernel code provided there; all that code needs to be checked in case
its been altered in some way.
--
James.
http://www.jamesbensley.co.cc/
