Quote:
Originally Posted by repo
This kind of behavior, which I see more and more, will compromise linux, and make it more and more vulnerable for attacks at the long run.
|
How so? Surely it will only affect those who choose to login as root, not the rest of us. Remember we are mostly dealing with open source software here, this means that all the intricacies of the OS are laid bare, for anyone who cares to see. People have been warned not to login as root, but if they still choose to do so, that is their prerogative! If something goes wrong they only have themselves to blame! I fail to see how this could affect those of us who don't login as root?
If someone really wanted to try to compromise Linux, they'd not find it hard getting hold of the information to do so, like I said we're dealing with open source software here, getting a copy of the OS then trying to find its vulnerabilities wouldn't be a hard task, and you could even setup a box yourself with whatever conditions you needed to exploit any weaknesses. Once the information needed had been collated and formed into something nasty, it would then only be a case of spreading it to the Linux community where it would affect only those silly enough to login as root. I fail to see how other peoples security inadequacies can have an affect on the people who are security concious and like to err on the side of safety?
Like I say, all the information needed is already there, it hasn't been locked away and hidden. Logging in as root may leave the individual vulnerable, but surely the rest of us are safe?