Who's Attacking My Server?

Re:Who's Attacking My Server? by tptacek on Sunday March 13, 2022 @03:28PM (#30664849)

qmail has one of the most notoriously inscrutable codebases of all time, and it has a startlingly good track record, because there's a coherent security design behind it; the same --- to a greater extent! --- goes for OpenSSH.

[ Parent | on HN ]

Re:Who's Attacking My Server? by raggi on Sunday March 13, 2022 @03:52PM (#30665057)

There's a side of this that I agree with, however there's other sides.

The reason I've been in the code base a bunch is because I've taken on support of forks bootstrapped by others in various scenarios.

Design safety goes a fairly long way, but it's so easy to screw up patching code shaped this way. I might trust the core, but I don't trust external patches.

The problem in practice is, distros can't help themselves.

[ Parent | on HN ]

Re:Who's Attacking My Server? by tptacek on Sunday March 13, 2022 @06:50PM (#30666548)

I wouldn't trust external patches to OpenSSH either.

[ Parent | on HN ]

Re:Who's Attacking My Server? by Eduard on Sunday March 13, 2022 @07:34PM (#30666879)

Maybe qmail and SSH have their good track record because of security by inscrutability

[ Parent | on HN ]