New answers tagged

1

No, it shouldn't scare you if you're worried about safety of packages. Though I do not recommend using it since it's not officially supported. Universe is community maintained software, that is to say "not officially supported software". I recommend you read this article so you'll understand the differences between Main, Restricted, Universe, and Multiverse ...


0

There are several different indicators of security health you can look for. Most notably do they publish information publicly about their security patches? Can they provide you with the results of their most recent penetration test or results from a static code analysis ? How often do the test their systems and software ? Can you find any CVE's related to ...


2

Preface: Without insider knowledge, it is equally likely that a company with security incidents in the past: is better prepared for the future will continue to have problems in the future While an analysis of company's response to a security incident might reveal some clues about their preparedness, it can also indicate strengths or weaknesses in areas ...


1

Mention of the PDCA cycle has been removed from ISO 27001 as of 2013, however ISO 27001 still specifies the requirement for continual improvement of your Information Security Management System (ISMS). This means that you may use another methodology as long as it does still meets the requirement of continual improvement.


2

Short answer - almost no way at all to tell. The question is equivalent to black box probing. You can put certain inputs to the box and get certain results - what exactly is the box doing between input and output? Can't tell. What other processes or devices have access to the same storage devices? Can't tell. The "almost" is because there may be sideband ...


17

Linux Mint was compromised and a backdoored ISO was deployed, Ubuntu was compromised, the entire Linux Kernel was compromised before, as were others (Debian, FreeBSD, etc). Developers protect code through checks and balances in what code is accepted into the mainline source code repository, and checksums. The issues revolve around whether or not an attacker ...



Top 50 recent answers are included