Fortify calls Apache tools insecure

TalkBack 1 of 12:

Next »

• Thread View
• Flat View

It's true, but not Apache centric

I have yet to compile anything that does not have external dependencies. Be it from a local CMS, a remote (internal to the company) CMS, etc. There is as much likliehood of an insider planting the trojanware as being hacked and having it put there. I think that limiting this to Apache and not every single (substantial, "hello world" is probably exempt ) large scale project is disingenous.

You could easily replace Apache with IIS and it is still true. (Yes, MS's servers are locked up, however, 50% of most white collar crime initiates from the inside). It is certainly a security aspect ALL companies need to be aware of.

On the other front, if botnets were an actual priority for anyone other than customers of software (i.e. ISPs, the government, etc), all 50M+ botted computers could be shut down/out of the internet in a few days. No one has the guts, fortitude or mandate to make that happen. Better to let millions spew forth DNS attacks and Viagra Spam and let the owners surf oblivious than lock em out and force/inform the owner of the problem.

TripleII

P.S. I wish I was CEO of Time Warner Cable, I would shut down/out every botted computer and turn it into a PRO campaign, drawing more customers in.

Posted by: TripleII   Posted on: 10/11/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now