bugtraq - Re: Re: New Santy-Worm attacks *all* PHP-skripts

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0412260906530.7140-100000@bugsbunny.castlecops.com>
Date: Sun, 26 Dec 2004 09:08:45 -0500 (EST)
From: Paul Laudanski <zx@...tlecops.com>
To: Raistlin <raistlin@...co.net>
Cc: Juergen Schmidt <ju@...sec.de>, bugtraq@...urityfocus.com,
        full-disclosure@...ts.netsys.com
Subject: Re: Re: New Santy-Worm attacks *all* PHP-skripts

On Sun, 26 Dec 2004, Raistlin wrote:

> Paul Laudanski wrote:
> 
> > Certainly doing it to /tmp, /usr/tmp, /var/tmp 
> > could help, but it isn't 100% foolproof, and some don't even consider it 
> > security.
> 
> Just a bit of hardening :)

There are a couple of nice reads, good for the new year.  

Linux Firewalls by Robert L Ziegler 2nd Ed
Linux Security Cookbook, O'Reilly
Real World Linux Security by Bob Toxen

Among others...

-- 
Regards,

Paul Laudanski - Computer Cops, LLC. CEO & Founder
CastleCops(SM) - http://castlecops.com
Promoting education and health in online security and privacy.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html