Top tips for stopping hackers - contribs please

[anup123]

Not sure but apparently it seems that AIDE should be installed at server setup time (if desired)

Here is the link to AIDE Docs:
http://www.cs.tut.fi/%7Erammer/aide/manual.html

Anup

[jroes]

http://eth0.us/ has some useful info

[keith@dito.ca]

When reading the post quoted I was surprised to find that a representitive of a Server leasing company would put forward this kind of narrow view on how to gain competitive edge in the market. My company leases many Un-managed servers, and in fact has been considering dbbaker's company for some of our future needs. It should be noted that for us to successfully utilize leased servers, we need information that allows us to better manage our servers. I would suggest that unless a company like mine can properly manage and support un-managed/dedicated servers, then there will be no need for us to lease from other companies... we will bring it in house, and build an IT support department ourselves. So if we want to encourage growth in a dedicated/self managed industry, we need to make the management and support of these systems open so that anyone who is willing can properly maintain the servers/systems.

It is key to note: the competitive advantage does not come from just making the servers work, it comes from the perception of value in the marketplace. Both Honda and Kia make cars that work, but there is a perceived distinction in the marketplace that Honda builds better, and therefore higher value cars. This perception translates into increased sales numbers and price numbers.

So, dgbaker, if you would like companies like mine to buy from you, you (and the rest of the support community) have to become partners with your customers, then you can contribute to, and share their success.

* I hope that you realize that my company, even though we want to learn to better manage our servers, do not represent competition to your company, instead we are prospects... so the very information that you suggest you would like to keep from your competition, may be the information that prevents us from becomming your customer.

There a few issues with doing this.

1. Why should anyone give away their secrets on how they do security?
2. Posting such info in public forums is also giving the hackers extra info on how the server is secured.
3. As I've stated on the forum before, we are all in this industry to make money, end of story. So why would I want to help my competition with things like this? If they have issues all the better for everyone else who may get their business.
4. Handing people tutorials on every little thing is not the answer, each must learn to fish instead of asking for the fish to be given.
5. Just because you can follow a tutorial does not mean you are any safer. Tutorials are and should be used as guidelines only and baselines, each system still needs to be looked at and handled individually to ensure proper/better security.

I know that sounds harsh and self-centered etc... but hey! business is business and in this industry one must do whatever they can to maintain an edge (no matter how small) on it's competition.

[chirpy]

Please pay more attention to the dates on posts and threads

The post you have quoted was from 09-15-2004 and your aggression towards someone else is wholy unwarranted, and in the context of these forums, unacceptable.

Please take more care in future.