- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
Linux syslog may be on the way out
|
|
Comments (5)
> Security through obfuscurity again?
Pretty much, yeah. I really thought the Red Hat folks had more sense than to repeat old mistakes. Apparently not. It's not like the binary format won't be hacked within weeks and tools developed to rewrite it.
And it's not like no one foresaw this problem. That's why you can redirect your logs to another system.
Pretty much, yeah. I really thought the Red Hat folks had more sense than to repeat old mistakes. Apparently not. It's not like the binary format won't be hacked within weeks and tools developed to rewrite it.
And it's not like no one foresaw this problem. That's why you can redirect your logs to another system.
It isn't a matter of obscurity, but rather verifiability / authenticity.
But aren't there better ways (some even already RFC'd) to "fix" these supposed problems?
And does this proposal even actually enhance verifiability / authenticity -- even leaving aside the downsides?
And does this proposal even actually enhance verifiability / authenticity -- even leaving aside the downsides?
The same technique (progressive signatures) is what revealed the tampering in the kernel.org git repos. So I'd say yes.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
Fortunately, as Ubuntu is proving as its sturdy undercarriage shows up in Mint condition, the Internet interprets brain-damage as brain-damage and routes around it, albeit with a lot of pointing and snickering.