4 ms·

Having consulted for many law firms over the years, they are notoriously stingy when it comes to taking care of their IT infrastructure. Almost all of them are

Having consulted for many law firms over the years, they are notoriously stingy when it comes to taking care of their IT infrastructure. Almost all of them are low-hanging fruit due to this. Especially as more and more of them started getting rid of in-house people and began to solely use MSP types.

sitepodmatt 8y ago
https://www.webhostingtalk.com/showthread.php?t=1726800 https://www.webhostingtalk.com/showthread.php?t=1726800 it seems so, here is a law firm on a $8/mo cpanel server with every service under the sun running on the box (SSH, FTP, https, pop, IMAP and so on) and hundreds (maybe thousands) of actors with some form of privileged access to platform (CGI, modphp, ftp and so on). host -t mx yourlawfirm.com before commissioning their services. Some people are blind to the risk, and unfortunately some communities push/protect sloppy solutions like the above as "secure".
- shiftpgdn 8y ago
  cPanel is pretty secure and was the industry standard before AWS/Azure/GCP and their ilk came along. You act like user jailing isn't a thing.
  - sitepodmatt 8y ago
    Cpanel is a fucking joke, on day one they launched their federated ID (yes scary concept) I reported a 101 xss in it, they can't do anything right, that's as late as 2016. Industry standard, don't make me laugh. How have you came to the conclusion of "pretty secure" please don't tell PHP base_dir and some shitty non containerised jail shell is all it takes? Respect to Igor at cloudlinux for trying to tackle the problem, about the only implementation which one would be able to sleep at night with, but can we stop polishing a turd.
checkyoursudo 8y ago
As someone who has done IT for law firms, administrated law firms, and owned a law firm, I endorse this statement. I have dealt with firms that pay tens of thousands per month in physical space rental that will balk at the idea of a couple-few thousand per year for IT/web infrastructure/maintenance/etc. Lawyers are probably not especially more cheapskate than other people, but I would not exactly be surprised if we are.
- deleted 8y ago
  [deleted]

sitepodmatt 8y ago

https://www.webhostingtalk.com/showthread.php?t=1726800 https://www.webhostingtalk.com/showthread.php?t=1726800 it seems so, here is a law firm on a $8/mo cpanel server with every service under the sun running on the box (SSH, FTP, https, pop, IMAP and so on) and hundreds (maybe thousands) of actors with some form of privileged access to platform (CGI, modphp, ftp and so on). host -t mx yourlawfirm.com before commissioning their services. Some people are blind to the risk, and unfortunately some communities push/protect sloppy solutions like the above as "secure".

shiftpgdn 8y ago
cPanel is pretty secure and was the industry standard before AWS/Azure/GCP and their ilk came along. You act like user jailing isn't a thing.
- sitepodmatt 8y ago
  Cpanel is a fucking joke, on day one they launched their federated ID (yes scary concept) I reported a 101 xss in it, they can't do anything right, that's as late as 2016. Industry standard, don't make me laugh. How have you came to the conclusion of "pretty secure" please don't tell PHP base_dir and some shitty non containerised jail shell is all it takes? Respect to Igor at cloudlinux for trying to tackle the problem, about the only implementation which one would be able to sleep at night with, but can we stop polishing a turd.

checkyoursudo 8y ago

As someone who has done IT for law firms, administrated law firms, and owned a law firm, I endorse this statement. I have dealt with firms that pay tens of thousands per month in physical space rental that will balk at the idea of a couple-few thousand per year for IT/web infrastructure/maintenance/etc. Lawyers are probably not especially more cheapskate than other people, but I would not exactly be surprised if we are.

deleted 8y ago
[deleted]