Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Tue 22 May 2018, 08:20
All times are UTC - 4
 Forum index » Off-Topic Area » Security
Bolt On Security
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [4 Posts]  
Author Message
Bruce B

Joined: 18 May 2005
Posts: 11488
Location: The Peoples Republic of California

PostPosted: Sun 28 Nov 2010, 01:02    Post subject:  Bolt On Security
Subject description: And I hate passwords

I'm not an operating system designer or engineer. Not even close.

What I'm about to write is opinion based with no pretense of expert
knowledge. (if I think I'm right it would be nice if I actually am)


My first argument is: Security is Perception.

The primary responsibility for security is the vendor's public relations,
advertising and marketing departments.

Sell an intangible. Sell the 'idea' of security.

If, after selling the idea, insecurity manifests itself with some specificity
into publicly available knowledge, then, maintain the perception of security
by turning the specific problem over to software engineers and fix it,
usually by patches.

Resell and keeping selling the idea.

Of course it's more complex. If the problem of perception gets bad in
certain ways, such as it seems everyone has a compromised machine,
the marketing mechanism may have to play the blame game, which
involves the users.

Make the user buy our newest operating system. This idea of not using
older software is justified by selling the intangible idea that the newest is
the most secure, maybe the only secure software.

The idea may be false, but if believed it doesn't matter.

Make more money, then make more money. Power, money and control.
Get it in your head - make more money and while you are at it, the end
justifies the means.

My ends justify the means. More money, power and control.

OK. I think I'm a cynic and a fairly sincere cynic at that.

I could go on and on. But I'll shift to Linux in this presentation at this

Linux, Linux, Linux

Linux doesn't sell or market. I don't think it does. Maybe it does.

Maybe I'm wrong. Anyone know who is in charge of marketing and sales?

Maybe it sells and markets itself.

Bolt on security

If Microsoft could simply bolt on security, why haven't they written the
nuts and bolts to do it?

What I'm thinking is that it's probably very difficult to approach security
from a bolt on perspective and have it work.

What I'm wanting to say is, "I think security needs to be in the foundation,
or if it doesn't need to be, it is nevertheless the best place to put it."


It obviously wasn't built on Dirty DOS.

Unix was designed as a multi-tasking and multi-user operating system.

It was an imperative design fundamental that the Operating System be
protected from the Users and that the Users be protected from each other
at the foundational level of design.

I think it a bit ironic that I don't think I require for my purposes the level
of security that Linux provides me at its foundation.

I want to run as root and I hate passwords.


New! Puppy Linux Links Page
Back to top
View user's profile Send private message 

Joined: 16 Jun 2006
Posts: 2307
Location: Wyoming, USA

PostPosted: Wed 01 Dec 2010, 16:54    Post subject:  

If you want security at the foundation, then OpenBSD is for you. But then, Linus will think you are a masturbating monkey... Laughing
Back to top
View user's profile Send private message 

Joined: 27 Mar 2010
Posts: 820

PostPosted: Wed 01 Dec 2010, 20:53    Post subject:  

To reedit up to date.
Last edited by postfs1 on Sun 27 Mar 2016, 18:46; edited 1 time in total
Back to top
View user's profile Send private message 

Joined: 20 May 2006
Posts: 6796
Location: Auckland, New Zealand

PostPosted: Thu 02 Dec 2010, 01:40    Post subject:  

BarryK wrote:
The must-[not]-run-as-root mind-set... is more a religious statement than anything else.

Do you know a good gtkdialog program? Please post a link here

Classic Puppy quotes

Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [4 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum

Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0451s ][ Queries: 11 (0.0140s) ][ GZIP on ]