Anyone hear of ANSA (Asp.Net Security Analyser)??
From: NomadPgmr (nomadpgmr_at_hotmail.com)
Date: Fri, 10 Oct 2003 06:57:54 GMT
I work for a web hosting company and recently received an email from someone
interested in secure hosting. They asked me to run the following scripts on
one of our web servers, saying they would only host with a company whose
server passed all of these tests. I have not done so and if we were even
tempted to do so, would only do it on an isolated server that we formated
the hard drives on afterwards. We don't even like to run some commercial
applications or home made DLL's, so no reason to start now. Has anyone heard
about these scripts or gotten a similar email?
Body of email follows:
Hello, I am interested in your Asp.Net hosting services and would like to
know more details about its security.
I work for a security company (***********) and we need to find a secure ISP
to host some of our client's websites (particularly this one:
We also want to start offering our own ******* branded packages in our
We will be reselling 'Secure Asp.Net' hosting packages using servers/ISPs
that successfully 'fail' all ANSA (Asp.Net Security Analyser) security
So, please download the latest version of ANSA from GotDotNet
40-4b52-924e-320edf64fba5) and if your servers are securely configured (i.e.
there is no 'high' or 'critical' and only some 'medium' classification
results) send me details about your reseller hosting packages.