On Mon, Nov 28, 2005 at 10:29:00AM -0000, Burke, S (Stephen) wrote:
> LHC Computer Grid - Rollout
> > [mailto:[log in to unmask]] On Behalf Of Paul Kyberd
> said:
> > The first should be written into the LCG operating procedures
> > "No critical test should depend on a known security
> > vulnerability.
> > Any such test should be removed from the list of critical
> > tests as soon as possible."
>
> If the issue is about running any software with known
> vulnerabilities then we should basically shut down the entire grid ...
If we don't fix the vulnerabilities then some hacker *will* force us
to do it after the damage has been done. We manage to escape at the
moment because we don't have much visibillity but that can be change
any moment.
Kostas
|