News for hackers. Stuff that matters.
Re:Minideb – A small image based on Debian designed for use ... by peterwwillis on Tuesday September 19, 2017 @03:04PM (#15287807)
A house on stilts makes it difficult to rob, but not for the man who walks on stilts. Security practices need to be implemented holistically or they are easily defeated. By themselves they aren't worth much and end up being unnecessarily cumbersome.

Removing outlying code that could be used as part of an attack can be useful for complex attacks. But they are essentially outliers - the actual code that you are actually running and is the actual target is still there, waiting to be pwnd. The time you spend trimming fat can often be better used to actually harden a system's access control or policies/procedures, perform auditing, etc.

There are no comments on this comment yet.