Security Basics mailing list archives

Re: IRC in corporate enviroment


From: AK <platsakos () gmail com>
Date: Thu, 23 Jun 2011 03:43:51 +0300

Using IRC at work paves the way for client-side exploits (and other
information leaks). On the other hand, freenode and such, can really be
helpful for the R&D people. Before allowing IRC to be used I would throw
a word of caution of not letting company resources ending up on pastebin
or someplace like that (think along the lines "hi guys, the following
paste aint working at line 134" where said paste is your company "secret
sauce" recipe. From a technical viewpoing, IRC can be easily isolated
network-wise and running it from a dedicated up-to-date firewalled VM
can alleviate a lot of issues (cloudburst-like exploits notwithstanding).

On 06/18/2011 09:47 PM, Dennis Dayman wrote:
Looking for some pros cons to having IRC connectivity in a corporate environment. Our R&D guys would like to join 
some coding channels to get ideas and help, but we are hesitating to allow them for fear of a possible hole being 
opened via an IRC channel and client.

thoughts on pro's or cons?

what is the beat way to implement if it is deemed ok?

-Dennis

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



-- 
What is the air-speed velocity of an unladen swallow? 


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: