RE: Linux hacked

From: Leif Ericksen (leife_at_dls.net)
Date: 10/25/04

  • Next message: Yvan G.J. Boily: "RE: Searching for Canadian IT Security agencies...." 
    To: "Nicholson, Dale" <DNicholson@APACMail.com>
Date: Mon, 25 Oct 2004 15:26:24 -0500

    Unless the system is required to be on the net while it is being rebuilt
    do not connect the CAT-5 to anything that has connection to the
    Internet. As well to rebuild the system do you have the kick-start file
    in / or /root? That is if the version of Linux you are installing
    supports that? Make a rebuild a snap! now are you doing this as a
    download install rather than from a CD? DANGER! Will Robinson Danger.
    ;)

    for relatively good security:

    1) You can do yourself.
    You could always set a iptables rule to drop all incoming packets.
    Do you have an extra system laying around?

    2) rely on another product
    http://www.smoothwall.org
    http://www.ipcops.net

    plus the other firewalls out there that required a dedicated machine to
    install them on.

    3) BEST SECURITY
    If you want 100% security make sure that the system is locked in a room
    that only you have access to and that there are NO outside connections
    via Ethernet, fiber optic, wireless, or telekinesis as well as any other
    known or unknown methods to that system. Furthermore you must develop
    your own code and you must be sure that you know how to program in a
    secure manner. :/
    Then when using this case market your product! But if you decide to be
    realistic and cool like the Linux world make it open source.

    :>>>

    Bottom line if it is connected to the Internet, and actually allows any
    communication in or out, it will eventually be compromised given
    somebody has enough time or interest in trying to break your system. 

    --
Leif Ericksen
  • Next message: Yvan G.J. Boily: "RE: Searching for Canadian IT Security agencies...."

    Relevant Pages

    • Re: How safe is IIS on Windows XP
      ... > like if I install the Windows XP Personal Web Server ... > a cable internet connection. ... Important is ensuring you're aware of security issues and that OS is up to ...
      (microsoft.public.inetserver.iis.security)
    • Re: eMac IE crash problem
      ... my knowledge of Macs has been limited to connecting them up to Windows or ... has a dial-up connection - the ISP is BT Openworld. ... Junk IE - this is no longer a supported Mac product and full of security ... I would also install all the M$ security fixes and try ...
      (uk.comp.sys.mac)
    • [NEWS] eSeSIX Thintune Thin Client Multiple Vulnerabilities
      ... Get your security news from a reliable source. ... All Linux-based Thintune models with firmware version 2.4.38 and prior ... REMOTE ROOT SHELL / BACKDOOR ... ica con_0_10 - password for first ICA connection ...
      (Securiteam)
    • Re: ActiveSync 4.1 Still does not work... (Solved for me)
      ... (The default installation do not configure the network connection ... AS4.1 installs some USB ... > the device as new the next time we install it. ... > in the system tray for the new 'network adapter' with the 'acquiring network ...
      (microsoft.public.pocketpc.activesync)
    • Re: I am having connectivity problems
      ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ... does the connection problem persist? ...
      (microsoft.public.windows.inetexplorer.ie6.browser)