If someone showed you a Linux server with a publicly-routed IP address running a smorgasbord of the usual suspects (say, Apache, MySQL, and PHP at the very least, and let’s toss in an ssh server and a Wordpress deployment for flavor, and fuck it we ball, add in sendmail) with an uptime of over ten years and with all the installed software using at least ten year old versions, and they told you it had never been pwned in any way, you would
1 Boost
0 Likes
@djsundog Even today, you can still occasionally find a HTML 3 or 4 website, on some random domain; running an era-equivalent cgi-bin script somewhere; that hasn't been completely taken over by vandals yet; AND you know the security on that cgi-bin script, isn't perfect.
EDIT: Their not common, you really got to go spelunking to find them; but they are there.
![Mike [SEC=OFFICIAL]](https://static.chinwag.net.au/accounts/avatars/000/000/001/original/b02e2e0cd4f0ffe5.jpg "Mike [SEC=OFFICIAL]")
@djsundog security by convincing attackers that this just has to be a honeypot because there's no way ...
@djsundog [that’s bait dot gif]
The box was statically assigned a public IP address but never actually connected to the network, wasn’t it
for the record, I have not been shown such a box and will not be showing you such a box by the time this poll ends or at any conceivable point beyond that. This is entirely a fabricated scenario for the purposes of thought.
@djsundog I've had wordpress installs compromised before the vulnerability had been discovered or patched, but I'm also still on Mastodon 4.2, so...
@djsundog "I would like to see the depth of defense"
@djsundog
SURE: Some people are lucky; and some REALLY old and unpopular websites, don't look like particularly valuable targets.