On Thu, 2011-03-24 at 10:29 +0100, Roman Zilka wrote:
> I actually did mean libmng - it's a good example exactly because it's
> so unpopular, yet exists on real systems. As for the reference, see
> `emerge -pv libmng`.
Sorry! I did a google search for "libmng" yesterday and turned up
nothing. I must have misspelled it since I tried it today and came up
with all kinds of references. My apologies to all.
> For the sake of security of that server, I hope you skipped a number
> of other steps you took.
I had one of my colleagues, who runs one of Austin's top computer
security firms take a look at the situation. He concurred with me on
the diagnosis, and there were a limited number of things that could be
done, including updating glibc. Customers are free to put whatever they
want on their websites, and those who run WordPress are warned that
they're liable for damages if their apps get hacked and the system
> I suggest quitting this discussion. It's getting way
> off-topic, too general and unfit for this mailinglist, as all these
> questions can be answered by checking sources someone else has
> previously spent their time on writing.
Roman, are you a moderator on this list? The Gentoo website describes
it as a "Mailing list devoted to Gentoo on the desktop" so I assumed
that Gentoo desktop security was an appropriate topic.
That having been said, perhaps you might recommend a few of the best
"sources someone else has previously spent their time on writing" since
you seem to have knowledge of these, and I'll be happy to let the thread
Lindsay Haisley | "The difference between a duck is because
FMP Computer Services | one leg is both the same"
512-259-1190 | - Anonymous