Text 2462, 40 rader
Skriven 2005-03-31 13:46:09 av David Drummond (3:640/305)
   Kommentar till text 2449 av Paul Rogers (1:105/360.0)
Ärende: rooted
==============
Paul Rogers -> David Drummond wrote:
 DD>> Yeah, I read that but it wasn't very convincing....

 PR> Hackers depend on that.  You ought to spend some time with
 PR> a good book on computer security.  Don't expect us to type
 PR> one in for you.  Also spent some time at CERT.  I've got
 PR> some links on my "Nerd Zone" page.

Why bother? This method works perfectly well for me.

 DD>> Just because I'm at a root prompt does not make it any
 DD>> easier for someone to drop this "malicious code" on my
 DD>> system.

 PR> No, it's easy enough.  They already know the exploits.  It's
 PR> just easier to hide it anywhere on the system when there are
 PR> no access controls in place.

 DD>> Paranoia springs to mind....

 PR> It isn't paranoia if they ARE out to get you, and they are.
 PR> A virgin system on the internet will be found and rooted in
 PR> about 10 minutes.

 PR>  The test is performed frequently.  Sysadmins
 PR> at Western Union and IKEA discovered that.  See:
 PR> http://www.angelfire.com/or/paulrogers/Headlines.html

Then these people have god-awful set-up within their systems!

I'm glad I don't allow those types anywhere near my servers.

-- 

regards

David

---
 * Origin: Long live http://felten.yi.org (3:640/305)