Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-disclosure] What is wrong with schools these days?

Subject: Re: [Full-disclosure] What is wrong with schools these days?
Date: Tue, 25 Apr 2006 17:34:05 -0500
I run Ubuntu (for my girlfriend's computer), nUbuntu (for learning), Windows 
(for school's software), and Trustix (for server). Of course all are behind a 
hardware firewall and properly configured and patched as far as I know. But who 
knows maybe I have been hacked and dont know about it, or maybe I havent, I 
mean no system is secure unless it has no access to any external network. So on 
this subject everyone is right in their own way. Lets all get along =o)

For Pauls next trick, he'll have you all believing that President Bush is a
genius.

Didn't you know he was? I thought everyone got that email from DHS. Maybe was 
just spam =oP





----- Original Message -----
From: "zap zoid" <zoidenator@gmail.com>
To: full-disclosure@lists.grok.org.uk
Subject: Re: [Full-disclosure] What is wrong with schools these days?
Date: Tue, 25 Apr 2006 10:54:57 -0700


  Since when is Zone-H an authoritative source.

For Pauls next trick, he'll have you all believing that President Bush is a
genius.

Paul, maybe for CrYpTic the statement holds true. Do you know him
personally? Have your broken into any of his linux boxen? Maybe he doesn't
run linux but rather HPUX, IRIX, Solaris, OpenSolaris or even Windows.

Just because your users are idiots doesn't mean CrYpTic is an idiot.

You seem overly agitated today, are you getting ready to launch an attack?



On 4/25/06, Paul Schmehl <pauls@utdallas.edu> wrote:

CrYpTiC MauleR wrote:
All you had to say was Microsoft =oP

That's hilarious.  The number one defaced website OS is Linux.  (See
Zone-H.org if you don't believe me.)

The number one problem I have here is unix boxes.  You know why?
Because a lot of open-source bozos run around claiming unix is more
secure than Windows.  So a lot of clueless people think that, if they
just set up a RedHat box, they won't have anything to worry about.

Ask them what that little red ball with the X in it is - you know - the
one flashing up there in the taskbar- and they'll say I dunno.

No OS is secure by default.  No OS can remain secure if it's not
properly configured and maintained.  Look at your box right now.  How
many of you have inetd or xinetd running?  Why?  What services does it
provide that you need?  Do you even know what chargen or rpc.statd is?
If not, why are they running (if they are)?  How many of you have a
workstation running with more than just ssh enabled and *no* firewall
running?

You name the OS, and I can tell you of at least one incident of hacking.
  We haven't had a Windows box hacked in a long time.  The last five
were two Macs and three RedHat boxes.  Does that mean Macs and RedHat
are insecure?  NO!  It means, until the general public understands the
problem and knows what the solution is, hacking will continue apace with
no sign of letting up.

The real problem is ignorance.

--
Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




-- 
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

<Prev in Thread] Current Thread [Next in Thread>