Re: [gentoo-hardened] Updates: a way too simplified security question I am asking anyway

[RB <aoz.syn@gmail.com>]

On Wed, Aug 20, 2008 at 12:14 PM, Jan Klod <janklodvan@gmail.com> wrote:
<snip rambling flame>

I'm not going to address each of the fallacies I see in your
statements, but you have an exceedingly idealistic view of software
development and particular OS' perceived security.  [Insert project
here] may have a slogan, but the developers are still human and thus
still make mistakes and are inherently lazy.  Short of being powered
by unicorn farts, there is no way any reasonably complex system can
approach that ideal.

In regard to your philosophy of updates, do you build a wall and not
defend it?  Do you plant a garden and not water it?  In the same
light, no system can be "permanently" secured.  Safes are rated by the
amount of time it would take a dedicated, skilled cracker to open it;
none are ever deemed uncrackable.  If you want more time, you purchase
[or build] one that better matches your needs.  System security is no
different.


RB