5 ms·

what was wrong with webmin? (ducks)

• thinkMOAR 9y ago
  https://nvd.nist.gov/vuln/search/results?adv_search=false&form_type=basic&results_type=overview&search_type=all&query=webmin https://nvd.nist.gov/vuln/search/results?adv_search=false&fo...
  • freehunter 9y ago
    Yeah, getting Webmin security right is possible but very challenging. Whenever I'm doing a security assessment at a client and I see traffic to/from servers on port 10000 I always make a note that there's probably some vulnerabilities there that our pentest guys will want to explore. I have no idea if Cockpit is any more secure, but Webmin does have its fair share of security issues.
    • thinkMOAR 9y ago
      Personally, no, i don't want a webserver managing my servers. But i surely hope not the same mistakes or security issues arise that happened for webmin.
• martinald 9y ago
  Or CPanel ;).
  • tyingq 9y ago
    Cpanel's licensing cost isn't trivial. https://cpanel.com/pricing/ https://cpanel.com/pricing/
    • comboy 9y ago
      Security is though.
• Celarnor 9y ago
  Honestly what I'm thinking.
• excalibur 9y ago
  How to get recommendations for a software solution on HN: 1. Submit an Ask HN thread, and ask for advice. 2. Watch your thread get no response or interest from anybody. 3. Give up on HN and go build your own solution. 4. When it's ready, submit it to HN to help others in your situation. 5. The recommendations you were looking for will appear in the comments.
  • nathan_f77 9y ago
    Haha, now I'm worried that this is going to happen to me. I'm looking for a production-ready Terraform/CloudWatch project for Rails + Sidekiq: https://news.ycombinator.com/item?id=16447092 https://news.ycombinator.com/item?id=16447092 If I can't find anything, I'm going to build it myself. (And I'm going to add Cockpit to my servers.)
  • wingworks 9y ago
    Haha, it's scary how close to reality this is. At least for me.