4 ms·
Wonderful. That helps me sell Debian + PostgreSQL over Windows + SQL Server.
by kryten 13y ago
Wonderful.
That helps me sell Debian + PostgreSQL over Windows + SQL Server.
- acdha 13y agoHave you told them about the SSH key fiasco? I've been running Debian/Ubuntu servers since the late 90s but I wouldn't make those kinds of claims about anything you haven't personally audited – and it's certainly not like it'd be impossible for an attacker with nation-state level resources to compromise an OSS project as well.
- kryten 13y agoOh I agree, but when discovered we don't have to wait for a government to do its dirty work before the mere mortals are allowed the patch. Patched, poked in the repository and job done. The temporal window of attack is pretty low. Take a look at Microsoft when CVE's are issued versus when the KB article with hotfix is announced and it hits windows update. Not a good story. Regarding the key fiasco, we used puttygen for key generation.