Re: [tlug] Chasing the GHOST in my machine

[Josh Glover <jmglov@example.com>]

On 30 January 2015 at 01:38, Nicolas Limare <nicolas+tlug@example.com> wrote:

> So you're safe.

Well... safe from this particular bug. Wait until the next buffer
overflow exploit comes out next week.

The only way to be safe is to unplug your box from all networks, shut
off Bluetooth / IR, and unplug all input devices. And then turn it off
and put it in a locked safe. Then put the safe in a bank vault. And
then hope to $DIETY that the bank isn't robbed.

Your best bet for having a useful computer with a modicum of safety is
to not run anything that listens on an external port. Distros have
gotten better about turning off all services by default, but be
careful about what you turn on explicitly. Then all you really have to
worry about are network stack exploits, which are relatively rare. And
physical security, of course.

Cheers,
Josh