Comment Re:Why admins dont install patches? (Score 1) 290
'unskilled' is a right word, even better might be 'unknowing'
I am a CS student (yes, same university as the guys behind AES-Rijndael ;) and currently I'm following a course on the development of secure software. Now I might say I know more-than-average about computers and I have some experience with a real-life company computer system but when the professor presented us a list of the most frequent security issues and a bunch of real world exploits the ease with which such an possible threat is introduced in the code made me feel like a 10-year old kiddie fooling around with the pc.
Fact is that a LOT of the sysadmins out there have no clou about security and the stunning amount of threats that exist in the software under their control, just waiting to be discovered and exploited. It should be mandatory in every decent computer related education to attend a course about security in software, not only for sysadmins but for software developers as well.
Knowledge == power!
...just my 0.02EUR...
and oh BTW: the professors main advice on how to avoid the majority of threats: use Java! :)
I am a CS student (yes, same university as the guys behind AES-Rijndael
Fact is that a LOT of the sysadmins out there have no clou about security and the stunning amount of threats that exist in the software under their control, just waiting to be discovered and exploited. It should be mandatory in every decent computer related education to attend a course about security in software, not only for sysadmins but for software developers as well.
Knowledge == power!
and oh BTW: the professors main advice on how to avoid the majority of threats: use Java!