Microsoft grapples with attack on MSN Korea site

TalkBack 11 of 20:

Next »

« Previous

• Thread View
• Flat View

No arguement there

The only problem I see is the fact that they were running unpatched systems. I have no problem with their actions once the attempted attack started.

But still... taking "the site offline for a few hours to fix the problem" is a reactive measure. Not a proactive measure. Note the article does not say it was taken offline solely for forensics, but rather to fix the problem. Also note that the hackers DID place "an additional frame on the Web site, a so-called iFrame". So software was placed on MS's servers without their permission or immediate knowledge (although it obviously did not take them long to figure it out).

Now if it does turn out that nothing was compromised (other than the server software itself) then there's no need to jump on MS since a save was made, but clearly mistakes were made that were preventable. Running an unpatched system, no matter what the OS, is asking for trouble.

Posted by: Michael Kelly   Posted on: 06/03/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Using NIC Teaming to Achieve High Availability on Linux Platforms Dell Network interface card (NIC) teaming is one method for providing high ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now