[kwlug-disc] Linus viruses

[Khalid Baheyeldin]

On Tue, Jul 27, 2010 at 7:10 PM, Insurance Squared Inc. <
gcooke at insurancesquared.com> wrote:

> On another thread on this list, someone wrote:
> Time and time again we are seeing that even with the protections in place,
> JavaScript ends up doing more harm than good. Many of the problems would
> simple not exist if JavaScript were not there.
>
> I call foul :).  I'm on the interwebs pushing the 'any' key all day long on
> my linux desktop and I have 0 security issues with Java - Or anything else
> for that matter.  So I pose the following questions:
>
> 1) have you ever had your linux desktop hacked?  Or any type of security
> breach?
>

Desktop? No.


> 2) if not, do you even know anyone that's ever had their linux desktop
> hacked?
>

No.


> Realizing that webservers are an entirely different story.
>

Forget desktops for now ...

There are more serious issues with web applications, regardless of what
platform
they are written for.

For example, Cross Site Scripting (XSS)
http://en.wikipedia.org/wiki/Cross-site_scripting

A well crafted XSS attack can give a hacker access to administrator rights
on
your server.

Serious stuff, and Javascript enables that.


> I'll start.  No and no. I've never had my my linux desktop attacked that I
> could tell.  And I don't even know anybody that has.
>
-- 
Khalid M. Baheyeldin
2bits.com, Inc.
http://2bits.com
Drupal optimization, development, customization and consulting.
Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
Simplicity is the ultimate sophistication. --   Leonardo da Vinci
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20100727/70be26f5/attachment.htm>