To view parent comment, click here.
To read all comments associated with this story, please click here.
That sounds bollocks to me (please forgive my language). I don't see how graphical widgets add vectors of attack in any way. ESPECIALLY locally run ones.
http://www.net-security.org/secworld.php?id=3994" http://www.net...
Local users are more dangerous than remote users because they have much more access. In the case of this exploit, any user with access can get root thanks to X (your beloved gui). There is a reason seasoned administrators say, "NO!" to X and anything gui on servers. I happen to be one of those Systems Administrators.
"Local users are more dangerous than remote users because they have much more access. In the case of this exploit, any user with access can get root thanks to X (your beloved gui). There is a reason seasoned administrators say, "NO!" to X and anything gui on servers. I happen to be one of those Systems Administrators."
There should not be any local users on a server, except for the administrator of the machine anyway. That is why server rooms are supposed to be kept secured...to keep all other people away from the machines. If there are servers that users have local access to, then you have some other issues to deal with.







Member since:
2005-07-06
In fact, adding a gui means more software in the stack and which means more points to attack the security of the server and more threats to the stability of the system.
That sounds bollocks to me (please forgive my language). I don't see how graphical widgets add vectors of attack in any way. ESPECIALLY locally run ones.