Subject: Re: OT - Win/Linux security. (Was: seti runs better on win or linux)
From: AthlonRob
Date: 12/10/2003, 00:24
Newsgroups: alt.sci.seti

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Sat, 11 Oct 2003 22:38:49 +0000 (UTC), Bob <none@none.none> wrote:
In terms of apps - what Mail client do you run on windows.  I recken 
there would be about a 90% or greater majority that will say either 
Outlook or Outlook express, similar numbers use IE as a browser.
IF I want to create a malicious webpage, which browser do i target - IE. 
  If I do the same for Linux???
  - kmail
  - evolution
  - moz
  - pine

You missed mutt!  :-)

How could you forget mutt???

and
  - konq
  - Moz
  - links
Where do I start?

And Netscape 4.x.  And that 'Dillos' thing or whatever it's called, I've 
never used it.  And there's lynx.  

To toss a few more cents on this ever-growing pile-

If I use Evolution to take control over a user's account on a system, I 
can't do very much from there.  The user has very little power over the 
system.  The user needs to be root in order to really be able to do 
anything of consequence.  It's also very very easy to clean up, just 
delete and re-create the user's directory and all is as it was.

With Windows, if I take advantage of a security flaw in OE that gives me 
control over everything that user and his single password had control 
over, I have full reign over the system.  There isn't anything I cannot 
do.

-- Rob | If not safe, Email and Jabber: | one can never be free. athlonrob at axpr dot net | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/iJEshm6KEoOOAe0RAsOzAJwLzGHU/8kfGhO1q+DUMCZaMvXUegCgwb9I lBnAo6JFxPoMQRG731Rmxa4= =y9wp -----END PGP SIGNATURE-----