APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Security Reminders


© November 2003 Tony Lawrence

Fri Nov 28 19:46:04 GMT 2003 Security Reminders

Links: newsvac.newsforge.com/article.pl?sid=03/11/28/1545237 (link dead, sorry)Debian attacker may have used new exploit
macslash.org/article.pl?sid=03/11/26/1240248 (link dead, sorry) New Security Hole In Mac OS X

The Debian Linux exploit was apparently a case of escalation: getting into the system with an ordinary user account, and then somehow becoming root.

The Mac exploit requires a "evil" DHCP server on YOUR network; rather unlikely ordinarily, but if your DHCP server was compromised by some weakness on it, this could be a concern.

So, let's remember the basics: weak passwords are dangerous. People who don't need to login remotely shouldn't be able to. Unnecessary services shouldn't be left running, even if they are supposedly "safe" behind a firewall. There are plenty of potential security problems that you can't absolutely control, but if you aren't doing at least the basics, you are just asking for trouble.

Reminder to SME clients: by default, NO remote user is allowed remote access or VPN use, and all other access (FTP, Telnet etc.) is completely off.. You can turn off ssh and vpn access entirely through your admin control panel.


Got something to add? Send me email.





(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

->
-> Security Reminders


Inexpensive and informative Apple related e-books:

Take Control of Apple Mail, Third Edition

Take Control of the Mac Command Line with Terminal, Second Edition

Are Your Bits Flipped?

iOS 10: A Take Control Crash Course

Take Control of iCloud, Fifth Edition




More Articles by © Tony Lawrence




Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us


Printer Friendly Version





Technology is both a tool for helping humans and for destroying them. This is the paradox of our times which we're compelled to face. (Frank Herbert)




Linux posts

Troubleshooting posts


This post tagged:

Blog



Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode





SCO Unix Sales, Support, & Service

Phone:  707-SCO-UNIX (707-726-8649Toll Free: 833-SCO-UNIX (833-726-8649)
www.SCOsales.com