in reply to Re: Re^2: What do people think of the YaBB forum script?
in thread What do people think of the YaBB forum script?

I will concede the point about intranet servers, though not without pointing out that many intruders are employees or generally supposedly trustworthy subjects.

In the case of a publicly accessible server though, I disagree, even if it's just a personal site for family communication. I remember someone's story whose home machine, hooked up on a cable connection, was hacked. When the box was examined, an SQL server with an email address database that wasn't there before was found - spammers had probably abused the machine as a relay. The rules have changed: a box on a static IP is not a crackworthy target if you have critical data on it - it's a crackworthy target in and of itself. The various honeynet projects offer impressive proof of the fact. Do not make yourself guilty of negligence.

Makeshifts last the longest.

  • Comment on Re^4: What do people think of the YaBB forum script?