Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-disclosure] What is wrong with schools these days?

Subject: Re: [Full-disclosure] What is wrong with schools these days?
Date: Tue, 25 Apr 2006 13:29:20 -0500
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You have to love it when totally clueless individuals leap into a
thread without reading enough of it to form anything but a knee-
jerk opinion...which is almost always ill-informed and incorrect,
however occasionally amusing.

Zap, clearly you fall into the above category...CrYpTic isn't an
admin/box owner who got owned or is worrying about his own systems
getting owned.  He has no boxes of his own that are germain to this
thread...except the PC he used to send the mail. Thanks for
playing, though.


On Tue, 25 Apr 2006 12:54:57 -0500 zap zoid <zoidenator@gmail.com>
wrote:
Since when is Zone-H an authoritative source.

For Pauls next trick, he'll have you all believing that President
Bush is a
genius.

Paul, maybe for CrYpTic the statement holds true. Do you know him
personally? Have your broken into any of his linux boxen? Maybe he

doesn't
run linux but rather HPUX, IRIX, Solaris, OpenSolaris or even
Windows.

Just because your users are idiots doesn't mean CrYpTic is an
idiot.

You seem overly agitated today, are you getting ready to launch an

attack?



On 4/25/06, Paul Schmehl <pauls@utdallas.edu> wrote:

CrYpTiC MauleR wrote:
All you had to say was Microsoft =oP

That's hilarious.  The number one defaced website OS is Linux.
(See
Zone-H.org if you don't believe me.)

The number one problem I have here is unix boxes.  You know why?
Because a lot of open-source bozos run around claiming unix is
more
secure than Windows.  So a lot of clueless people think that, if

they
just set up a RedHat box, they won't have anything to worry
about.

Ask them what that little red ball with the X in it is - you
know - the
one flashing up there in the taskbar- and they'll say I dunno.

No OS is secure by default.  No OS can remain secure if it's not
properly configured and maintained.  Look at your box right now.

How
many of you have inetd or xinetd running?  Why?  What services
does it
provide that you need?  Do you even know what chargen or
rpc.statd is?
If not, why are they running (if they are)?  How many of you
have a
workstation running with more than just ssh enabled and *no*
firewall
running?

You name the OS, and I can tell you of at least one incident of
hacking.
  We haven't had a Windows box hacked in a long time.  The last
five
were two Macs and three RedHat boxes.  Does that mean Macs and
RedHat
are insecure?  NO!  It means, until the general public
understands the
problem and knows what the solution is, hacking will continue
apace with
no sign of letting up.

The real problem is ignorance.

--
Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.5

wkYEARECAAYFAkROaoAACgkQuCj5fjTzkbDRXwCeNeUw0tAoGV/vU2cmeqJUqsa/bZ0A
oIhSVqI4A/13+nIvQG5tCy9E6dWL
=stEX
-----END PGP SIGNATURE-----


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

<Prev in Thread] Current Thread [Next in Thread>