Re: Security (was RE: Why NOT the web?)

Hmmm....gotta talk to my 'money man' <vbg>.

(Sorry David, I couldn't resist).

"Never gonna be enough bullets" (David Bowie - Never Get Old)

With the number of people going to be taken out back and shot in this thread, and the proliferation of crappy Windows servers in the world, I predict a shortage of bullets in 2005 - maybe time to invest in an ammunition manufacturer.

:-)

....Neil

James Rich <james@xxxxxxxxxxx> Sent by: midrange-l-bounces@xxxxxxxxxxxx
2004/12/30 14:36

To
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
cc

Subject
Security (was RE: Why NOT the web?)

On Thu, 30 Dec 2004, Walden H. Leverich wrote:

If you don't have a firewall blocking all but port web traffic to a web
server, you should be taken out back and shot. If you are browsing the
web from a server you should be taken out back and shot. If you are
running outlook on a server, you should be taken out back and shot. If
you haven't followed best-practices for locking down IIS and running
(and re-running) baseline security analysis you should be taken out back
and shot!

Best security practices for IIS is to remove it and use something else.

I also ask myself these questions:
   Why should browsing the web be so dangerous?
   Why should checking my email be so dangerous?

If a machine is so crappy that these simple tasks cannot be performed safely then get rid of that machine. If I am working to resolve some issue on a server and the documentation is online are you telling me I need separate machine to read the online documentation? That's ridiculous. As I see it, anyone who introduces such inept machines into my network needs to be taken out back and shot.

James Rich

It's not the software that's free; it's you.
                 - billyskank on Groklaw