Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 33 guests online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Resourcesarrow News from the Outside Worldarrow Ubuntu Linux proved to be secure out of the box
Ethical Hacker Community Forums
January 08, 2009, 08:23:34 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Ubuntu Linux proved to be secure out of the box  (Read 3158 times)
0 Members and 1 Guest are viewing this topic.
shawal
Jr. Member
**
Offline Offline

Posts: 86


View Profile
« on: April 07, 2008, 02:05:00 PM »

Its over a week now, and no ethical hacker wants to admit it!
the CanSecWest2008 proved that Linux or more preciesly Ubuntu Linux Configuration (an updated one of course) was hard to crack compared to Vista, and Mac. the problems with the later were mostly client application attacks, however still Linux seems to be a bit harder to bite  Grin

http://www.linux.com/feature/131059

Client application security, web browsing, email, document reading are the main easy traget for system compromise
Logged

RHCE, GIAC GCIH.
_Marshel_
Jr. Member
**
Offline Offline

Posts: 61

Life Is too short to be someone else.


View Profile
« Reply #1 on: April 08, 2008, 01:13:09 AM »

Linux Rulez, Linux Rocks  Grin
Logged
shawal
Jr. Member
**
Offline Offline

Posts: 86


View Profile
« Reply #2 on: April 08, 2008, 02:24:29 PM »

_Marshel_ ,

the point was that systems, or operating systems especially on the server have far better security than before as a default setting (AV, IDS, antispam, antispyware, personal firewalls, etc).

however client software can open big doors, and through this networks, and trusted servers can be exploited.

the client software that was exploited in Windows vista, and on the MAC can be argued to have similar flaws in Linux, however in Linux you have other layers of defense (local home dir, user account priviliges, apparmor or selinux security domains).

so may be Linux Rocks, however if we are not careful enough we and the day to day client applications we use are the weakest link
Logged

RHCE, GIAC GCIH.
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1049


View Profile WWW
« Reply #3 on: April 08, 2008, 05:17:07 PM »

i wouldnt quite say that, there was an unpatched open office exploit for ubuntu in immunity's canvas for several months before it was patched.
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
g00d_4sh
Sr. Member
****
Offline Offline

Posts: 296



View Profile
« Reply #4 on: April 08, 2008, 07:38:38 PM »

Also in the interview with the guy who targeted Vista, and I believe Mac, he said next year he'll target Linux.  His view was that they are really all the same, which is a bit pessimisted compared to my own view... I prefer Linux, but I'd admit there are flaws and bugs for each.  Was rather interesting his trying to sell his laptop that might have 'traces' of his 0-day exploit on it on Ebay.  He appearently wanted to see what a 0-day exploit would go for on the open market, though he claimed by the time the bids finalized, Adobe was supposed to have a patch out for the bug he had found.  Either way, I don't know enough personally about making holes in any OS to comment professionally.   
Logged

"Bad.. Good?  I'm the guy with the gun"
RoleReversal
Hero Member
*****
Offline Offline

Posts: 507


View Profile WWW
« Reply #5 on: April 09, 2008, 03:01:37 AM »

I believe the choice of OS is becoming less of a factor in determining security. The Vista and Mac machines were cracked using exploits in apps not the OS (if I'm wrong can someone correct me, haven't had my morning coffee yet Wink ). As OSes get better at security, the bad guys move to the next softest target, this seems to be client apps.

Windows (and increasingly Mac) have the largest 'user' base therefore more potential people to do dumb things. Due to the niche, Linux is mostly used by 'computer people' who are less likely to do 'dumb' things.

OS level security is not important if a user is quite happy click every OK prompt going to see their 'video'.
Logged

A little bit of sanity:
http://www.infosanity.co.uk
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.044 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.