London Stock Exchange got hacked as soon as it switched to Linux

[Thatguy]

Yeah, BS from 2003. Can Microsoft:
- disable module/driver loading completely
- strip every single unneeded exe/dll/bin from system
- completely disable direct access to memory
- disable execution on selected paritions/folders
- provide sources for immediate inplace security response

The only still possible way to hijack linux is using zeroday exploits and even that taken youll have to somehow upload your tools there and somehow assemble them.

they don't have to hack the kernel. the point is, everything is vulnerable if its on a network period.

[crazycheese]

piece of junk PHP module

Exactly. Why put in on server?

[Ex-Cyber]

Server daemons and web apps are what are usually hacked, anyway. Your kernel and firewall could be 100% exploit-free, but then some piece of junk PHP module could allow a SQL injection attack.

[crazycheese]

http://www.esecurityplanet.com/trend...an-Windows.htm

Yeah, BS from 2003. Can Microsoft:
- disable module/driver loading completely
- strip every single unneeded exe/dll/bin from system
- completely disable direct access to memory
- disable execution on selected paritions/folders
- provide sources for immediate inplace security response

The only still possible way to hijack linux is using zeroday exploits and even that taken youll have to somehow upload your tools there and somehow assemble them.

[crazycheese]

btw. lamersky tried to convince Linux users we need their products.

Yeah, I mean it, they now try to convince LSE need their products hehe.

Linux isn't as secure as many would like to pretend it is, once there is some serious money to be made by hacking a linux system, it will be hacked.

It will be hardware/blob/microcode that is hacked, not linux itself then.

[Thatguy]

http://www.esecurityplanet.com/trends/article.php/3086051/Is-Linux-Really-More-Secure-Than-Windows.htm

[Thatguy]

Happened a few days ago. The London Stock Exchange seems to have been hacked when it switched to Linux:

http://www.computerworlduk.com/news/open-source/3258808/london-stock-exchange-under-major-cyberattack-during-linux-switch/

Now is this good publicity or not Also noteworthy is the absence of coverage on LWN.net and the like

Linux isn't as secure as many would like to pretend it is, once there is some serious money to be made by hacking a linux system, it will be hacked.

[Ex-Cyber]

Now is this good publicity or not

I don't know, but it's bad journalism. Who has alleged that there's been an attack? What evidence is there that the described failure was actually due to an attack and wasn't caused by an internal IT problem? ComputerWorld declines to tell us.

Also noteworthy is the absence of coverage on LWN.net and the like

Maybe because LWN and the like don't issue articles full of breathless speculation based solely on anonymous sources with no evidence?

[kraftman]

it seems it was during the switch.

btw. lamersky tried to convince Linux users we need their products.

[crazycheese]

Kaspersky & Co hate it when their bodyguards services are unneeded. =)