Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Bugtraq: Re: Windows Update: A single point of failure for the world's economy?

Re: Windows Update: A single point of failure for the world's economy?

From: Aaron Cheek <aaron_cheek_at_yahoo.com>
Date: Wed, 3 Sep 2003 15:02:33 -0700 (PDT)

> More of a risk than up2date for RedHat or emerge -u
> system for Gentoo? Or cvsup for *BSD?

Certainly!!! For Red Hat (and all the major distros),
you have a zillion mirrors all over the world, and,
additionally, you can in extremely straightforward way
(e.g. wget -r) bulk download all the patches from any
of those mirrors and apply them in a glitch (rpm -F).

Even if DoS attacks against the official names, IPs or
whatever take place, you always have your "local"
mirror to download patches from, which will be named
as mymirrorsite.mymirrordomain.mycountry. And if the
guys from RedHat (et al.) are wise enough, they can
set up out of band channels to distribute the patches
to the mirrors in the event of a major DoS attack.

No single point of failure, as you can see.

Aaron

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
Received on Sep 04 2003

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]