the good news is that it does make windows more secure. you cant hack something that has crashed.
this post was submitted on 19 Jul 2024
51 points (100.0% liked)
linuxmemes
28410 readers
2077 users here now
Hint: :q!
Sister communities:
Community rules (click to expand)
1. Follow the site-wide rules
- Instance-wide TOS: https://legal.lemmy.world/tos/
- Lemmy code of conduct: https://join-lemmy.org/docs/code_of_conduct.html
2. Be civil
- Understand the difference between a joke and an insult.
- Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
- Don't get baited into back-and-forth insults. We are not animals.
- Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
- Bigotry will not be tolerated.
3. Post Linux-related content
- Including Unix and BSD.
- Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of
sudoin Windows. - No porn, no politics, no trolling or ragebaiting.
- Don't come looking for advice, this is not the right community.
4. No recent reposts
- Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
5. π¬π§ Language/ΡΠ·ΡΠΊ/Sprache
- This is primarily an English-speaking community. π¬π§π¦πΊπΊπΈ
- Comments written in other languages are allowed.
- The substance of a post should be comprehensible for people who only speak English.
- Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
6. (NEW!) Regarding public figures
We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations. - Keep discussions polite and free of disparagement.
- We are never in possession of all of the facts. Defamatory comments will not be tolerated.
- Discussions that get too heated will be locked and offending comments removed. Β
Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.
founded 2 years ago
MODERATORS
Remember guys, it took about a decade for Solar Winds to discover somebody had root access to everybody that used their software, another decade for somebody outside Solar Winds to discover it and tell everybody, and half a decade with nobody claiming to have solved the issue up to now.
So when you believe that your computer with an EDS is safe just because you can't use it, think again.
EDS?
It's an oops.
It should be IDS.
That's intrusion detection system, right?
The most secure computer is the one not running any software. That's why I recommend Crowdstrike.
Also: don't trust your employees to boot into safe mode.
Trust a 3rd party to freely install system level files at any time.
I knew how to fix the computers at work today in the morning, but we couldn't get through to the help desk to get the bit locker codes for each computer until near the end of the day.
Also: donβt trust your employees to boot into safe mode. Trust a 3rd party to freely install system level files at any time.
Exactly. This is exactly the problem, and unless people wisen up the software security problem is only going to get worse. Companies and Governments need to rethink how they approach security entirely. This is a preview of what is to come, its only going to get worse and more damaging from here, and none of the vendors care.
Companies and Governments need to rethink how they approach security entirely. This is a preview of what is to come, its only going to get worse and more damaging from here, and none of the vendors care.
It is easy one for goverments. Ban security through obscurity. As well proprietary security software.
Moonbutt's moonbuck))) Have I seen you somewhere?
Ban security through obscurity. As well proprietary security software.
The government likes proprietary software. They are never going to ban it.
The fact that random companies like Crowdstrike have kernel drivers in millions of computers they they ship remotely is a security risk in and of itself. We're lucky crowdstrike just shipped a bug that crashes computers, other companies could have shipped a lot worse.
other companies could have shipped a lot worse.
other ~~companies~~ governments could have shipped a lot worse.
FTFY
The problem is the blind trust of these "vendors"
Decentralize control
Centralize control in house.
Compared to the status quo, that's much more decentralized.
I'm actually curious to know, how is Linux inherently more secure than windows?
Few things, in rough order:
-
Smaller = less attack surface. You can strip a Linux OS down to only what is needed.
-
Open source, so it's can be peered review. There are Unix distros like OpenBSD, that share lot of user space component options, where auditing is a big thing. The whole sunlight and oxygen stops things festering as much. As abosed to things locked in a box in another box down in a cellar.
-
Open source transparency forces corporates to be better. We can see what they are and aren't doing.
-
Diversity. The is no "Linux", it's a ecosystem of Linux distros all built and configured differently, using different components. Think of Linux as just a type of base board in a sea of Unix Lego bits. There are plenty of big deployments on BSD bases that share a lot with some Linux deployments.
-
Unix security is simplier than Windows security, so easer to not mess up.
In general it is. Opensource software has less bugs that proprietary. And even those bugs can be mitigated with hardening.
That's...a gross oversimplification. Super popular open source projects tend to have few bugs from the sheer number of contributors available to fix them, but active proprietary software has dedicated teams working fulltime every week to deal woth issues. Proprietary stuff is often way wider in scope than open source, so more surface for bugs to creep in. Scope and team size have a lot more to do with bug density than open vs closed source.
I don't know how much effort thoose proprietary software companies put into the actual software. Why is windows so shit? Why is whatsapp buggy? They try to get money with shit software with no optimisations at all.
How many open source projects have 50 million lines of code like Windows, or legal agreements related to backwards compatibility and version support guarantees?
A for-profit company is going to focus on whatever generates revenue, sure. But crappy software will lose customers in a non-monopoly scenario. They're not exactly incentivized to make broken things nobody wants.
They are neither incentivised to make quality of life improvements to their software. Thats why i hate most of them
Because you can own your system and inspect and alter all of it in case it's needed.
If you follow the philosophy that it follows, that is, giving the least possible permission to any application, to make it work, it easily becomes much more secure than Windows.
On the other hand, if you log into your GUI desktop as root, Bill Gates save you.
In addition to what others have said, there's the move towards containerized applications on Linux via flatpaks, immutable distributions, and snapshots/rollbacks. There are also distributions like Debian with a delayed package release schedule for added stability and security. Its my understanding that you could have an exceptionally secure, effectively trustless, Linux system beyond what is possible on Mac or Windows.
Sort of an aside, but I am seeing Microsoft more as a hostile entity that I need to protect myself from.
load more comments
(12 replies)
Yeah, time to switch from CrowdStrike to SolarWinds...
I really don't want to be the guy responsible for this fuck up
For a company this big it would also have to have gotten past a code review and QA team, right? ... right? ...
And who pushes out production updates on a Friday!
"Security"
We do.
"If something goes down over the weekend, fewer people see it" - my leadership team.
I guess Asia can report the problem on Sunday and I'll get a nastygram and fix it that afternoon.
Of course, of course. This is how these things are always done.
Yeah, something this big is absolutely not one engineer's fault. Even if that engineer maliciously pushed an update, it's not their fault
it was a complete failure of the organization, and one person having the ability to wreck havoc like this is the failure.
And I actually have some amount of hope that, in this case, it is being recognized as such.
load more comments
(1 replies)
I'm pretty sure Windows is plenty secure. It isn't private or usercentric but of on a security perspective it isn't bad.
Linux has plenty of security problems just like any OS
Defending Windows in a linux memes community.
That's a bold move cotton, let's see how that works out for 'em
view more: next βΊ