[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Am I missing something here



Some weeks ago someone posted this link, which seems like a pretty good
laundry list of tasks to consider when hardening a server:

http://www.average.org/cobalt/quick-security-guide.html

Good Luck.

----- Original Message -----
From: "Steve Werby" <steve-lists@xxxxxxxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Wednesday, March 13, 2002 8:39 PM
Subject: Re: [cobalt-security] Am I missing something here


> "Steve Mansfield" <slm@xxxxxxxxxxxxx> wrote:
> > Over the last 2 weeks we have had 6 Cobalts on our network HACKED!!!
>
> Out of the box the servers are not secure.  That's pretty much the case
for
> most server and PC operating systems.  You bought a toaster oven, not an
> armored truck.  You need to secure the box yourself, hire someone to do it
> for you or cross your fingers, spin the barrel, pull the trigger and hope
> the chamber that's on deck isn't loaded.  If you post some details about
the
> security solution you had in place some of us migh be able to help.  And
> it's always possible your on an untrusted network with someone sniffing
your
> traffic.  We need more details.  And I do sympathize with your
frustration.
> I do a lot of security work for clients and based on my experience there's
> been a significant increase in the frequency of hacked Cobalt servers over
> the last year.
>
> --
> Steve Werby
> President, Befriend Internet Services LLC
> http://www.befriend.com/
>
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>