Cybersecurity - Memes

1977 readers

2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago

MODERATORS

[email protected]

386

We're probably not the only ones running outdated software (feddit.org)

submitted 3 months ago by [email protected] to c/[email protected]

45 comments fedilink hide all child comments

Fun fact: The outdated software runs on outdated hardware, too.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 3 months ago (2 children)

I was going to make a Linux joke being why my company's security has been stable... Until the XZ Utils exploit.

[–] [email protected] 4 points 3 months ago

Yes, cybersecurity wouldn’t disappear, it just wouldn’t be the humongous, roiling, clusterf**k it usually is.

Name a high-profile breach on a *nix system not due to configuration (user) error. I’d add “or a hardware/firmware hack” but you get the idea.

[–] [email protected] 0 points 3 months ago (1 children)

Just this months patch tuesday notes:

Today is Microsoft's August 2024 Patch Tuesday, which includes security updates for 89 flaws, including six actively exploited and three publicly disclosed zero-days. Microsoft is still working on an update for a tenth publicly disclosed zero-day.

Sure, security vulnerabilities exist in the linux world, but luckily not that many.

[–] [email protected] 5 points 3 months ago* (last edited 3 months ago) (1 children)

yes and no. if you look at the number of reported CVEs, debian takes the crown of all operating systems. still feeling more secure on linux than any closed source system

[–] [email protected] 3 points 3 months ago

Yeah, that's because there's an entire cottage industry of people scraping old bug reports, and linter errors to create CVEs they can sell to customers worrying about security. It creates a huge number of false positives. E.g. see https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/

I think any measure that is looking at a raw count is going to be meaningless. Particularly, comparing raw counts between open and closed software.