Re: Question for you all

2003-07-03 Thread exon
On Mon, 30 Jun 2003, CreativeSell wrote: Hi All, Having just got off an awful php host, my partner and I have decided to get our own redhat server. However we are slightly apprhhensive about ebing hacked to pieces. we are keeping up to date with all bugtracks and security updates...what

Re: Best Linux Distribution for laptop

2003-07-03 Thread exon
Without a doubt Owl. http://owl.openwall.com Have fun /exon On Tue, 1 Jul 2003, Potter, Tim wrote: We're going to be installing Linux on a 500Mhz/128MB Dell laptop for monitoring, forensics, scanning, security assessments, etc. What is the best distribution for this? Thanks, Tim

Re: Apache: limiting the execution place

2003-06-18 Thread exon
, and send out the HTML output. So going through the web server is useless to Attacker. Jonas On 2003-06-17 02:16, exon [EMAIL PROTECTED] wrote: I don't quite see the point, or I've misunderstood what you're asking for. Do you want to block local users from seeing what global users can? What

RE: Digital Evidence Question - What is an effective Windows hard-disk search tool?

2003-06-18 Thread exon
Run linux from floppies. then you can mount the filesystem in question and (possibly) read from it. As a worst case scenario, you can get a binary image of the disk and use 'restore' software on it later (mount it as a loopback filesystem in linux and fiddle with partition table geometry and all

Re: redhat audit

2003-06-17 Thread exon
man find and look into -mtime. It's not a very good method, however, since you're probably being duped by 'touch -r origfile mv'd to preserve timestamp backdoorfile' If this is not the case, you're looking at the results of a totally incompetent intruder who should be shot at sight. If I were

Re: Apache: limiting the execution place

2003-06-17 Thread exon
I don't quite see the point, or I've misunderstood what you're asking for. Do you want to block local users from seeing what global users can? What hinders the local users from getting it anyway through the webserver instead? /Andy On Mon, 16 Jun 2003, Chris Ess wrote: Comments below.

RE: ASP Pages

2003-06-17 Thread exon
If the client sees the code, then so can the user. I say wget and netcat or even telnet and rest my case. /Andy On Mon, 16 Jun 2003, Fred Dirkse - OIC Group, Inc. wrote: Ben - Unless your webserver is configured improperly, it will not return the asp code to the client browser. When a