Re: Keeping the webserver safe

2008-10-05 Thread Jack T Mudge III
On Sunday 05 October 2008 05:37:17 pm Dusty Wilson wrote: > >From what I understand, /etc/passwd has to be world readable. If I'm > > wrong, correct me please. If it's world readable, anyone can read it > unless you use a chroot or use OS containers like OpenVZ (they'd still > see the file, but i

Re: What to do about SSH brute force attempts?

2008-08-23 Thread Jack T Mudge III
I don't mean to say that linux isn't vulnerable, as any operating system has its vulnerabilities, but it seems to me that with linux as a minority market share at the moment (for desktops), and in the fields where linux is common (servers), the people administering them are generally skilled en

Re: www.juniorguide.com

2008-01-01 Thread Jack T Mudge III
On Monday 31 December 2007 02:02:53 pm Jim Popovitch wrote: > On Mon, 2007-12-31 at 16:38 -0500, Pls check this new site wrote: > > Please see this site in Subject > > SO... is someone at d.o doing something constructive about all these > The risk is that d.o might eventually start getting bloc

Re: fail2ban vs. syslogd compression

2007-08-30 Thread Jack T Mudge III
On Wednesday 29 August 2007 03:56, G.W. Haywood wrote: > Most offenders > are blocked permanently, at the last count we're blocking about 27,750 > ranges.  Our scripts could handle the 'repeat' messages if they needed > to, but they don't.  The script kiddies don't get five tries, we block > them a

Re: secure installation

2007-08-20 Thread Jack T Mudge III
On Monday 20 August 2007 10:47, alex black wrote: > > thus defeat the purpose). A default firewall simply can't work, > > even if we > > had some way to implement it perfectly for all packages (without > > breaking > > any, which we undoubtedly would). > > It all depends on context - I agree that a

Re: secure installation

2007-08-20 Thread Jack T Mudge III
It would be a great risk to a company TO offer a warranty, especially since most of us either: a) don't read warranties anyway, so they (e.g. M$) can say whatever they want, b) don't really care. I happen to fix PC's for people for some cash on the side (being 17 and in the U.S. with our crapp

Re: Secure Installation

2007-08-17 Thread Jack T Mudge III
On Thursday 16 August 2007 15:09, R. W. Rodolico wrote: > Unfortunately, I have to point to some of the > user oriented firewalls you get for windoze (which, to my knowledge, Linux > does not have). When they are installed, the shut down basically > everything incoming, and all but a few standard o

Re: secure installation

2007-08-16 Thread Jack T Mudge III
On Thursday 16 August 2007 05:09, Robert Van Nostrand wrote: > The correct answer for the better of all now/future Debian users is to not > put a gun in the hands of a child. > For those mental midgets that are willing to put their CC info on a box > that they have no clue about then they deserve t

Re: strange requests from Vanguard Securities: 53,137,138

2007-08-12 Thread Jack T Mudge III
On Sunday 12 August 2007 13:16, Wade Richards wrote: >Opening up ports >to stop log file messages is kind of like removing your armour because >you don't like the loud "ping" sound of bullets bouncing off it. Well said. I really couldn't have said it better myself. The only other thing I could ad