Security, Hacking

Hello all!

I haven't got my own website yet, but soon I'm going to start one (or two ). What worries me is the security. I've seen what hackers can do. I wonder if any of you know some tips how to improve security of website. Or maybe you know how hackers gain access to one's website, than we can think of a way to prevent it...

What do you think?

Thanks,
Piotrek

First of all you have to be sure that the security of your hosting provider is the best arrount, speak about this with your hosting provider, try to find out about the security they use, physical and software, and if you plan to install an CMS be sure that you will use the last release and you will have to install all the security update from the producer. Not very long time ago I see a case of a hacked PostNuke, the only solution was to uninstall...so...beware...and ask...always ask and search on the internet about your problems.

Regards,
Ovi

[Alexandru Ungur]

Originally Posted by Piotreksan

Hello all!

I haven't got my own website yet, but soon I'm going to start one (or two ). What worries me is the security. I've seen what hackers can do. I wonder if any of you know some tips how to improve security of website. Or maybe you know how hackers gain access to one's website, than we can think of a way to prevent it...

What do you think?

Thanks,
Piotrek

http://www.google.ro/search?hl=ro&am...4%83&meta=

I quote:

Definitions of Hacker on the Web:

A slang term for a computer enthusiast. Among professional programmers, the term hacker implies an amateur or a programmer who lacks formal training. Depending on how it used, the term can be either complimentary or derogatory, although it is developing an increasingly derogatory connotation. The pejorative sense of hacker is becoming more prominent largely because the popular press has co-opted the term to refer to individuals who gain unauthorised access to computer systems for the purpose of stealing and corrupting data. Hackers, themselves, maintain that the proper term for such individuals is cracker.
http://www.wmo.ch/web/www/WDM/Guides...-glossary.html

Now, if you want to keep "crackers" away, my advice is this: hire someone competent since securing a server is not something for the hobbysts that can't make the difference between a hacker and a cracker.

If you really want to do it yourself, than you'll have to start with the basics, know your operating system, it's functionality, it's core components, their purpose and way of working, their weakneasses, learn about the Internet from the big picture till down to the tiniest IP packet... learn about firewalls, about intrusion detection systems, (about FSIDS and NIDS)... etc.
just a few points where to start:

http://www.cert.org
http://www.insecure.org
http://www.packetstormsecurity.com/papers/docs/

Good luck!

Alex
~ still learning about security every day, after 7 years of using Linux ~

Thank you very much sir!
I was expecting someone to correct me with the hacker-cracker definition :>
Yes, I know there's lots and lots to learn about, but one has to start somewhere Once more thanks for the links and the respond!


Piotrek

P.S.
Why Linux? Is it that good? Or is it safer?

[Alexandru Ungur]

Originally Posted by Piotreksan

...

P.S.
Why Linux? Is it that good? Or is it safer?

It works for me...
...and it works for Google too who's hardware is composed of a farm of 4000 (if I remember well the number) PCs connected to each other and acting like a single supermachine and... using Linux
Safer? Safer than FreeBSD, OpenBSD or other unices? You certainly do not compare it with Windows are you? It's like you'd compare a house with broken windows (and doors btw) with a rock solid castle

Linux represents for me stability, flexibility, power, maturity, total control, best use of hardware resources, freedom and a lot more.
I really enjoy the fact that I start (sometimes) my computer in the morning and leave it running all day (or all week, month who cares...) and know that:
1. when I come back I won't see a blue screen with white font saying "I'm sorry, I died again Error 00FFDA00344. figure it out yourself what it means..." kind of errors;
2. no stupid spyware will send away any info about me on the net;
3. no virus will get in
4. no script kiddie will get passed by my firewall
5. I can really continue relaxed the work from where I left it.
Without a reboot....

Now tell me if this ain't OS paradise....

Have a nice day, and good luck with your quest for knowledge. It worths the effort!

Alex

[Paul_KY]

"I really enjoy the fact that I start (sometimes) my computer in the morning and leave it running all day (or all week, month who cares...) and know that:
1. when I come back I won't see a blue screen with white font saying "I'm sorry, I died again Error 00FFDA00344. figure it out yourself what it means..." kind of errors;"

That is fricking Hilarious!!!



But so true :cry:



Paul

Thanks a lot Alex!!!
We'll see, maybe one day there will be "Linux" on my start screen instead of well known to everyone "Windows". But the thing about it is that 98% of the world wide computer users uses Windows. I'm not talking about following the crowd but if you work or do something that other people should see -like a website- it's better to do it in the environment they use.
But still if I think of scientific job and pc for that, Linux will probably be my choice then...

Thank you,

Piotrek

[Alexandru Ungur]

Originally Posted by Piotreksan

Thanks a lot Alex!!!
We'll see, maybe one day there will be "Linux" on my start screen instead of well known to everyone "Windows". But the thing about it is that 98% of the world wide computer users uses Windows. I'm not talking about following the crowd but if you work or do something that other people should see -like a website- it's better to do it in the environment they use.
But still if I think of scientific job and pc for that, Linux will probably be my choice then...

Thank you,

Piotrek

You're welcome Piotrek, and I agree that testing in end-user's environment is very important, but keep in mind, that.. in the end, your site will probably land on an Linux box so testing the server side too is also an important part. Besitdes MSIE runs just fine on Linux (with CrossOver Office)... so I also use that for testing even though I am running Linux.

Good luck!

Again -thanks very much sir!

And good luck to you too!

Piotrek