As reported by numerous organizations, there's a good possiblity that many US web sites will be the target of Chinese crackers between May 1st and 4th; some fear it will not be only limited to government sites, but for commercial and individual computers as well.

If you are a sysadmin, now's a good time to make sure your firewall rules are up to spec and possibly making a backup of important system and data files.

If you are a CGI programmer, I'd highly recommend avoiding doing any changes to scripts on publically accessable servers for the possibility of opening a hole for these crackers to use to gain access to the system.

Certainly nothing may come of these attacks, but given the number of news sites with which I respect that are posting warnings of this, I'd definitely take their advice.

Update : As to respond to questions of "why not secure at all times?", generally, a script kiddie or one that is cracking a system is going to take whatever steps to keep his work quiet and untracable as he can. This is the hardest type of attack to secure against, and it's one that you must keep ever viligent on. However, with this potental attack, we are talking about full blown DDOS attacks, or people that are brute forcing their ways into systems, caring not whether they are detectable or tracable, since it's unlikely they will be punished for it. And while these tend to be the most rudamentary attacks, they are also the ones that tend to get forgotten or overlooked by security because "well, no one would brute force a crack on a system!". But as others have stated, security should be a primary concern for all computer users; I'm sure here at PM that lesson is not at lost, but with some of the possible attacks, even the most vigiliant person may find themselves under attack.


Dr. Michael K. Neylon - mneylon-pm@masemware.com || "You've left the lens cap of your mind on again, Pinky" - The Brain

In reply to Be Very Wary Next Week... by Masem

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.