Re: Security (was RE: Why NOT the web?)

[Michael Ryan <michael@xxxxxxxxxxxxxxxxxx>]

I think it's going to get pretty icky out back...

On 12/30/04 02:36 PM, "James Rich" <james@xxxxxxxxxxx> wrote:

> On Thu, 30 Dec 2004, Walden H. Leverich wrote:
> 
>> If you don't have a firewall blocking all but port web traffic to a web
>> server, you should be taken out back and shot. If you are browsing the
>> web from a server you should be taken out back and shot. If you are
>> running outlook on a server, you should be taken out back and shot. If
>> you haven't followed best-practices for locking down IIS and running
>> (and re-running) baseline security analysis you should be taken out back
>> and shot!
> 
> Best security practices for IIS is to remove it and use something else.
> 
> I also ask myself these questions:
>  Why should browsing the web be so dangerous?
>  Why should checking my email be so dangerous?
> 
> If a machine is so crappy that these simple tasks cannot be performed
> safely then get rid of that machine.  If I am working to resolve some
> issue on a server and the documentation is online are you telling me I
> need separate machine to read the online documentation?  That's
> ridiculous.  As I see it, anyone who introduces such inept machines into
> my network needs to be taken out back and shot.
> 
> James Rich
> 
> It's not the software that's free; it's you.
> - billyskank on Groklaw