(Untitled)

[samildanach]

From the paper I'm submitting this evening:

"We ultimately discovered that Tomcat security enforcement, which is turned on by default in Debian, requires tighter software security than is currently supported by OpenMRS. The experimentation and research required to discover this incompatibility was by far the most time-consuming part of this

Comments

[holyoutlaw]

Does what you say above have any relation to this:

http://xkcd.com/424/

???

[samildanach]

Only in that we're talking about the same system. My project was to deploy OpenMRS, an open-source medical information system; I chose the Debian platform to do this. The OpenSSH fiasco is about an unrelated security flaw discovered in that platform. That's a big deal in part because Debian is considered one of the most technically-solid Linux distributions, so it's more of a blow to their reputation.