[cfarm-users] Upgrade on gcc12, gcc13 and gcc14

Christopher Sean Morrison brlcad at mac.com
Sun Jul 23 15:46:35 CEST 2017


> The problem is old distros, like Fedora 1 and Debian 5, don't receive
> patches anymore. They are effectively honeypots that compromise the
> integrity of the cfarm network. There's little that can be done to
> minimize the risk. Once a listening socket is opened to the world, the
> attack surface drastically increases.

A relatively simple solution could be to have the older compromised configurations be only accessible from the newer farm machines.  Two hops to get to them, but drastically reduced exposure profile.

Cheers!
Sean


More information about the cfarm-users mailing list