It’s been a while since I’ve wrote anything. A long while! For this I apologize. (Not really, I owe nothing to you!) I’ve picked up scuba diving and have quickly headed down the road towards Instructor, where I will soon be able to share my passion with new and upcoming students. In the short time I’ve been involved in the sport; my local dive shop has sold me on several trips and tons of gear. And who else but Richie Kohler would come along and sell me on a $12,000 rebreather (No joke, he lives pretty close to me).
Recently however, I began building a site for my dive team and running it on a freshly installed and configured Windows 2003 SP2 box. Getting through SP2s ‘ALL OFF’ security mentality was one thing, something that I am still working at, but I ran into another problem. Because security is so tight, I ended up having to make some screwy permission sets to allow my PHP scripts to directly modify objects such as photos and videos using ImageMagik/FFMpeg respectively.
Running native Linux binaries on a Windows machine is inherently difficult, throw in IIS 6.0 and SP2 and now you have a headache on your head. So after reading dozens of guides/manuals/your sisters bra sizes, I managed to get all my scripts working. Yay! Note from Saman: Not my sister, she’s off this month.
Let me interject here, I don’t care what you have to say about me using Windows 2003 and IIS 6.0. Yes, I know that I could use Linux + Apache and various other services out there, but the fact is, there is always a good reason to KNOW and be able to OPERATE that system that so many people despise so much. I mean really, are you, under principle, going to quit a job or refuse to do the work simply because you don’t approve of the foundation architecture running on the servers? NO! At the end of the day, you have to suck it up and do it. So I did…
(Oh and yes, every step of setting up MySQL and PHP angered me, so I feel you)
But, anyways, the story must continue.
After a long hard days work throwing up ‘vast windows to the sauce of life modifiers’ (if you can figure that one out I will name my first born after you), I decided to run a security scan on my server remotely (I was in Orlando, server was in my basement at Philly). 20 minutes later, I got some pleasing results, things weren’t actually as bad as a I thought… Minus the files I had to give permission to for the image handlers. In a stroke of genius and self directed masochism I decided to teach myself an important lesson about remembering to lock holes and proceeded to format my server, I spent hours slaving remotely using one of my open holes. You see, the scripts ran via a command prompt, and in order to allow users to run that command prompt, well let us say I had to put my server in a low cut shirt and mini skirt and place it on the corner.
Ah what a night that was. Don’t worry, I was quickly able to remotely restore the server using a ghost image and all was well. But there is a lesson here kids. Remember, the best way to lock down a server or any piece of computing equipment is to know how to break it. At least get an idea of the tools out there, learn what kind of attacks there are, and find ways to prevent it. Sure you can read the guide to securing your Windows 2003 server, but at the end of the day, there are about, say, 100,000,000,000,000^23 other ways to get in. So check yourself and don’t spread any diseases around the neighborhood! And if you are using Windows, don’t forget to get it spayed or neutered.
PS. This goes for any Windows box, including your Windows XP box. During school I frequently went to campus housing and ran port scans followed by accessing administrative shares and finding pictures of you girlfriend in less then moral depictions. And by the way, this doesn’t just go for Windows, the same scanning tools be used on Mac and Linux as well. And NO, Linux and Mac are not ‘more secure’ and less susceptible to viruses and malicious code. If you think this slap yourself and go join the creationist movement.
Let me break this down. On one hand, over 80% of the worlds computing power run on Windows. On the other, there is a community of people who thrive of security holes, breaking locks, and doing what others can not. So if someone decides on creating a virus in order to make a name for themselves, are they going to choose the miniscule percentage of people to attack, or are then going to go for the larger?
Now, it’s off to go dive in a 40 degree stone quarry!
-AngryNetworker
Pirate 2nd class
Directing of Plundering Operations
Lead PilageARRRRR
Tanooki Mario Suggests You Read These Related Posts:
Sign Up For Windows Home Server Beta 2$600 Router for $60Backup Your WordPress Database NOW!Privacy PolicyYour Network Sucks - Apparently Mine Does Too!