RE: Ten least secure programs

From: Paul Kurczaba (paul_at_myipis.com)
Date: 07/01/03

  • Next message: Dan Clements: "RE: Must read for everyone" 
    To: "'Chris Berry'" <compjma@hotmail.com>, <oclug@oclug.org>, <windows2000@freelists.org>, <security-basics@securityfocus.com>
Date: Mon, 30 Jun 2003 18:08:38 -0400

    7) AOL Instant Messanger

    -Paul Kurczaba

    -----Original Message-----
    From: Chris Berry [mailto:compjma@hotmail.com]
    Sent: Saturday, June 28, 2003 6:09 PM
    To: oclug@oclug.org; windows2000@freelists.org;
    security-basics@securityfocus.com
    Subject: Ten least secure programs

    I'm putting together a list of what seem to be the ten least secure
    computer
    items in use today with the idea of having a set of things to recommend
    AGAINST people using, probably to be posted on the IT room door with a
    note
    like "NO, you cannot use the following!!". Here is what I have so far,
    I'm
    looking for additions and comments. The list is in order from with the
    worst offender being number one. These should be products whose inheirent

    design is flawed, not that are just difficult to secure. I expect
    vigorous
    discussion. *putting on flame retardent garments* Oh, and leave Operating

    systems out of this one.

    1) Microsoft Outlook
    2) Telnet
    3) Sendmail
    4) IIS Server
    5) Wireless networking
    6) PHP
    7) ?
    8) ?
    9) ?
    10) ?

    Chris Berry
    compjma@hotmail.com
    Systems Administrator
    JM Associates

    "Within every man beats a heart of darkness." --The Shadow

    _________________________________________________________________
    Help STOP SPAM with the new MSN 8 and get 2 months FREE*
    http://join.msn.com/?page=features/junkmail

    --------------------------------------------------------------------------
    -
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.

    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.

    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    -------------------------------------------------------------------------- 

    --

  • Next message: Dan Clements: "RE: Must read for everyone"

    Relevant Pages

    • Re: Ten least secure programs
      ... SSH ... CB> 4) IIS Server ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. ... Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)
    • RE: Ten least secure programs
      ... My advice to others is to always use best practices regardless of the OS ... No one has created the perfect and totally secure ... Subject: Ten least secure programs ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
      (Security-Basics)
    • RE: File permission scanner
      ... The DumpACL/DumpSec tool has the ability to drill down and generate reports ... viruses in spite of reasonable efforts to secure this medium. ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ... about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)
    • Re: Question for you all
      ... As for RedHat, I like it, you can make it as secure as any distro, ... When installing RedHat choose a custom install and then check select ... > our own redhat server. ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)
    • Re: Ten least secure programs
      ... generally dictate by themselves what is and isn't allowed on "your network". ... It's a business decision made by management after you've told them of the ... it's best to learn how to secure vs. just saying someone can't have it. ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
      (Security-Basics)