-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday, 2009-12-13 at 15:34 +1100, Basil Chupin wrote:
On 12/12/09 21:18, Carlos E. R. wrote:
There is a security list, if you really think this is a security issue. However, there is nothing in the world that can protect you from a trojan you install yourself.
Thanks Carlos. I know about the security mail list.
But this is not what I am talking about. I see no reason why I, or any, openSUSE user have to subscribe to a - any - security mail list to begin with.
Also, the statement that "nothing in the world ..... can protect you from a trojan you install yourself" is just a bit of a rhetorical statement considering that when you - as a home user - run something like openSUSE *EVERY* file/application you install HAS to be installed by "YOU" as superuser. Try calling up YasT. You won't get in unless you type in the root password.
So, this statement is just a furphy :-) .
It is a fact. Nothing can protect you (fully, that is) from a trojan. It is impossible. Same as in real life... I don't know the English names of the scams you can be subject to. Some of them are age old, and still people fall for them. Like "tocomocho" in Spanish.
But if you are also implying that I should be pursuing this in the security mail list then my response is that why shouldn't it be discussed in a broad issue mail list such as this but instead be hidden within the bowels of a very specialised, and boring for almost everyone, mail list such as security? :-)
Because the people most experienced in security are there. If they are busy experts, they will not read this. Truly, not even writing there guarantees that they'll answer this :-p You can discuss it here, of course. But then don't complain you do not get "official" answers. Nor that I assure you that you will get them there. Maybe you wont. Maybe experts consider this a futile discussion and ignore this thread completely >:-) - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAksk93QACgkQtTMYHG2NR9VYmQCfVCOlnbaPRIPABkSILB4j1Z6M V6wAoIQ1byDt6qrdY45CFYGWR1my+QZ7 =0AGX -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org