RE: [cobalt-users] Need advice on Colocating or Self Location

["Les Toth" <cobalt@xxxxxxxxxxxxxx>]

We had 12 Websites hacked recently all from different backgrounds.
We had
. Financial Institutions
. Personal Domains
. Schools
. Hobbie Sites.

Script kiddies are the worst out there.. Not only dont they have any
intelligent code that they have written but they usualy dont understand what
they are doing or the consequences of their actions.

Spamming and Porn has very little to do with weather a website gets hacked..

Spammers usualy get spammed back.. and Pornsites are only targeted legaly
cause what type of hacker today doesnt have a large porn collection?

But anyway the moral of the story is to firewall everything bar whats
necessary.

Les

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Steve Werby
Sent: Friday, 12 April 2002 2:15 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Need advice on Colocating or Self Location


"Grant Stern" <grantstern@xxxxxxx> wrote:
> Also, I don't do silly things like spamming and porn
> hosting, my sites aren't really very attractive hacker targets thus far.

Grant, do you mean that your sites are relatively immune to hacking because
they're not involved in any kind of activity that people dislike?  I've had
a lot of clients and peers over the last year whose servers have been
hacked.  None of them hosted adult content and none of them spammed.  Nearly
all of them were the unfortunate victims of script kiddies running software
overnight that happened to scan the subnet that their servers were on and
then found that the script kiddies used cut and paste instructions to
exploit vulnerabilities on their boxes.  They weren't specifically targeted
and they didn't have reason to think they'd be targeted.  Their mistake was
to think that they were safe because they were not what they considered to
be good targets.  Unfortunately, as far as I'm concerned it seems that a
good target just happens to be a vulnerable box at the wrong place at the
wrong time.  And there's no reason to think that every box on the same
network in the same building as you is your friend either.  Especially since
the box sitting next to you could be an owned box.  My 2 cents.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/


_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users