Full Disclosure mailing list archives

Re: Ant-Sec - We are going to terminate Hackforums.net and Milw0rm.com - New Apache 0-day exploit uncovered


From: Valdis.Kletnieks () vt edu
Date: Thu, 16 Jul 2009 13:52:16 -0400

On Wed, 15 Jul 2009 12:41:02 BST, mrx said:

ii) Backed up and mirrored the content so that they could be back up in
24 hours.

Strictly speaking, any site that gives a flying f**k in a rolling donut
about their availability should be doing this *anyhow*, even if they aren't
worried about getting hacked.

Statistically, you're more likely to hear the sound of a disk drive head going
into oxide-plow mode or the click-click-click of a dead servo platter than you
are being hacked.  And you're gonna want backups then.

And no, doing RAID isn't a cure-all.  If there's a fire, all the disks burn. If
there's a plumbing leak upstairs that spills zillions of gallons of water
through your hardware, all the disks spark and short out. Plus, I've seen
enough RAID controllers take a crap all over all the disks far too many times
in my career.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: