4 ms·
Ahh yes, the "if you can't turn it into Fort Knox, don't bother at all" guy. Turning up at every security discussion since 1874.
by markdown 13y ago
Ahh yes, the "if you can't turn it into Fort Knox, don't bother at all" guy.
Turning up at every security discussion since 1874.
- bdamm 13y agoYou can't claim that serving static content from a read-only filesystem is "de rigueur", and that securing your DNS registration is "fort knox". I think the point was that the OP was claiming static content from a read-only filesystem as the solution, and the reply was pointing out that this is hardly the best or first actions. I would personally expect that the openssl group is suffering some embarrassment, but this sort of hack is a risk of the business. Hopefully we get a good writeup.
- verroq 13y agoThe point is that when your attacker has the skill to overwrite your web server's memory to carry out an attack. You never had a chance.