RE: Linux (OT)

by Michelle Brown <mab(at)OREGON.UOREGON.EDU>

 Date:  Fri, 07 Apr 2000 08:15:46 -0700
 To:  ht(at)ohlsen.dk,
Eric J Hoffman <ehoffman(at)smalldogdesign.com>,
hwg-techniques(at)mail.hwg.org
 In-Reply-To:  localhost
  todo: View Thread, Original
Security through obscurity is never the answer.  I can't understand the
attitude that if i use something so old, or so "rare" that no one else
knows it, then my stuff will be safe.  

The way to keep your data secure is to keep it written on paper and locked
in a safe in your office.  The way to keep your data most secure on the
web/network environment is to keep current with security patches and do
regular system audits.  Changing passwords (especially default admin ones)
often is very important, check your logs for any signs of trouble....do
port scans...blah blah.  If someone wants to crack your site, they will go
to the trouble to go to a website and read 2 paragraphs on how to exploit
holes in the product you use.  fix the holes.

my 2cents

-Michelle


At 09:18 AM 4/7/00 +0200, Hans-Henrik T. Ohlsen wrote:
>
>> Yet the very same issues I receive from security firms speak of holes in
>> Linux and different flavors of Unix platforms.  The important thing to
>> remember is that no platform is bulletproof;  holes appear in all
flavors of
>> web products...
>
>So the solution is to choose eg. an operating system that hackers and other
>wrong-doers do not know.
>
>But who has the time to learn these systems, and can they really do what we 
>need
>them to do?
>
>
>Regards,
>
>Hans-Henrik
>
>
>---
>
>ht(at)ohlsen.dk   http://www.ohlsen.dk/ht/
>www.ohlsen.dk/ht/wap/index.wml ICQ: 4630900
>


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Michelle Brown
Web Site Specialist
Student Academic Affairs
University of Oregon

mab(at)oregon.uoregon.edu
(541) 346-1172

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA