Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: Bandit127 on 27 August 2008, 06:43:50

Title: Security alert for Linux servers
Post by: Bandit127 on 27 August 2008, 06:43:50

For those that are interested.

"CERT: Linux servers under 'Phalanx' attack" from The Register (http://www.theregister.co.uk/2008/08/27/ssh_key_attacks_warning/)

Similar on SANS (http://isc.sans.org/diary.html?storyid=4937)

Title: Re: Security alert for Linux servers
Post by: TheBoy on 27 August 2008, 08:30:02

At least OOF server should be secure from it - best practices dictate no shared keys, and no remote root logon, so you still have to brute force the root password to do anything dangerous.

Sadly, though, many Linux users insist on using such security bypass mechanisms - much like Windows users logging on with admin rights - lulled into that false sense of security that Linux is somehow immune from security attacks....