Hacked Gentoo Linux server taken offline

TalkBack 24 of 65:

Next »

« Previous

• Thread View
• Flat View

You certainly are something "GRindinAxTaRupy"

[quote]I read the article and NOWHERE did it mention apache. Seems someone needs to get a clue about something he employs so well: hypocrisy! [/quote]

In case you forgot, *you* are the one that brought up Apache in the first place, and if you want to talk about Apache, IIS and security, I'll be happy to oblige.

Of course Apache running alone is going to be a pretty damn secure web server, but it won't do much. How many people run *real* websites on apache without php, asp, perl, or ssl, or mysql installed?

What you just don't get (because you obviouly have no real systems experience) is that there more to Apache than just Apache. If there is vulnerability with php, and your apache server uses php, then someone will be able to compromise your apache box and assume the same priveledges as the web server. The same goes with MySQL, ssl, perl, ect.

Many if the IIS vulnerabilities have to do with unessesary 'addon' features that have nothing to do with basic web serving, like the Indexing service, ASP, WebDAV, ect. Turn these things OFF, and you have a much more secure, though possibly less usefull server.

The big differences between IIS and Apache when it comes to security, it that IIS comes with all of the whiz-bang features enabled, and it runs by default as a privledged account.

The actual quality or security of the code behind each web server solution is rather irrelevant, as what it comes down to are those difference I pointed out above. 99% of these differences can be abated with Microsoft Products, but unfortunately, users like you, who lack a basic understanding of what network systems security entails, are the ones who use only Microsoft products.

Instead of praising apache for it's valid strengths (designed to run under a restricted account, very stable, effecient, large user community), you bash the other guy and quote irrelevant, and suspect statistics.

Instead of knowing *why* IIS servers get hacked alot, and complaining about the *real* problems with Microsoft products, you just jump on the blame-microsoft bandwagon and spout a bunch of regergitated propoganda.

Get a clue.

Posted by: toadlife   Posted on: 12/04/03 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now