Re: Apple2World Site Down

["Ernest" <ernestls@home.com>]

"stramiello" <stramiello@whiterabbit.resnet.gatech.edu> wrote in message
Pine.LNX.3.96.1001020112050.12306E-100000@whiterabbit.resnet.gatech.edu">news:Pine.LNX.3.96.1001020112050.12306E-100000@whiterabbit.resnet.gatech.edu
...
> Next time secure that puppy... if you got taken down by scripts, that
> means this is probably a known exploit which *should* have been protected
> against. And you say he used a password grabber? Dude, you should *NOT* be
> sending passwords plaintext across the open network!

> I sympathize with you for having your box taken down, but seriously,
> getting hacked by a script kiddy is fairly demeaning.

I can understand it how it happens. Security is a tricky thing for someone
who doesn't have a lot of experience with it, and if you're like most
admins, you don't have a lot of extra time to research it, and you sure as
hell don't want to experiment with your company servers. The best advice
that I can give you is to hire an expert. Even if you think you know
everything about network security, hire a second opinion. The consultant may
only find one small flaw in your setup but one hole is all a good hacker
needs. Bringing in an expert is really a smart thing to do for lots of
reasons but the two biggest reasons are that an expert specializes in what
they do, which means that they're up to date on hacker techniques, and
secondly, it frees up your time for doing what you specialize in -running a
network.

Good luck on nailing the guy that hosed your site. I hope that catch the
SOB, and take away his computer rights the way that they did with other
hackers they've caught.


> Kudos on the shadowed logs, though...
>
> If you'll tell me what OS you're running I can toss you off some security
> progs (nonexecutable stack patches and so forth).
>
> And if you want, I'll toss you off the sections of my logs where people
> have tested my site's security... maybe some of the IPs will match and
> help you track down the joker?

You're a good guy, Warren.  Admins should help each other out like this as
much as possible. Sadly, most of us are to egocentric to admit that we don't
already know it all, and so we can't ask for help without admiting that we
don't know it all. Thus, losers will continue to take advantage of us.

Ernest


>
> ~Warren
>
> ------------------------------------------------------------
> Warren Stramiello |
> 325909 GT Station | A good USENET Motto would be:
> Atlanta, GA 30332 | a) "Together, a strong community"
>  (404) 206-4208   | b) "Computers R Us."
> ------------------+ c) "I'm sick of programming. I think
> WhiteRabbit       |     I'll just screw around for a while
> 128.61.35.35      |     on company time."
>                   |
> ------------------------------------------------------------
> |   stramiello@WhiteRabbit.resnet.gatech.edu               |
> ------------------------------------------------------------
>