Go to Otherpower.com Home Page Go to Forcefield Shopping Cart Go to Wondermagnet.com Home Page
Front Page - [Homebrewed Electricity-- (wind) (solar) (hydro) (steam) (controls) (storage) (mechanical)] - Classifieds - Site News
Everything - Newbies - [Remote Living-- (housing) (heat) (light) (water)] - Rants & Opinion - Diaries - Our Products
What went wrong? | 7 comments (7 topical, editorial)
Re: What went wrong? (3.00 / 0) (#4)
by gizmo on Tue Aug 26th, 2008 at 07:06:53 AM MST
(User Info) http://www.thebackshed.com

If the admin's are reading, I would be a little concerned about the above pic. The user has browse access to the web sites directories. This is bad. By default, directory browsing should be turned off in the web server config files. Having it turned on means anyone can browse around the folders, except for those with a "default page". It also means they can find out what OS and what web server version is used, in this case CentOS and Apache 2.2.3. Knowing what version is running makes hacking a lot easier.

Glenn



Re: What went wrong? (3.00 / 0) (#5)
by TomW on Tue Aug 26th, 2008 at 09:06:44 AM MST
(User Info)

Glenn;

All good points and info.

Problem is, unless the place actually explodes or catches fire, ADMIN will not do anything whatsoever to fix or otherwise maintain the forum.

I stopped suggesting maintenance items a couple years ago when I realized a Luddite was in charge of sysadmin duties here. Cannot even open dialog about it. Go figure.

I really don't want to get started on it but a lot of good forum specific advice here gets completely ignored by the only person capable of making it happen.

His email is at the bottom of most pages here. Feel free to contact him and express your concerns perhaps he will respond.

Just how it is.

Tom

"Education consists mainly of what we have unlearned."--Mark Twain
[ Parent ]



Re: What went wrong? (3.00 / 0) (#6)
by gizmo on Tue Aug 26th, 2008 at 02:59:59 PM MST
(User Info) http://www.thebackshed.com

Hi Tom.

Just thinking, it might be an idea to delete my message, or at least the details of the Apache version. Same with that picture. I had a look on Google and there are some security issues with that version, it was silly of me to put the version number in text in my post, means it can be found with a search.

Just to be safe.

Glenn

[ Parent ]



What went wrong? | 7 comments (7 topical, 0 editorial)

Menu
· create account
· How to use the board
· FAQs
· search the board
· Google search the board
· Old Otherpower Board

Login
Make a new account
Username:
Password:

Powered by Scoop
You must be a registered user to post here. It's easy and free, and the link is on the upper right side of your page.
All trademarks and copyrights on this page are owned by their respective companies. Postings are owned by the poster, but may be deleted or moved at the ADMIN's sole discretion. The Rest © 2003 Forcefield.
You can Email the board ADMIN here. PLEASE include the username you signed up with!