Security Basics mailing list archives
Re: IRC in corporate enviroment
From: AK <platsakos () gmail com>
Date: Thu, 23 Jun 2011 03:43:51 +0300
Using IRC at work paves the way for client-side exploits (and other information leaks). On the other hand, freenode and such, can really be helpful for the R&D people. Before allowing IRC to be used I would throw a word of caution of not letting company resources ending up on pastebin or someplace like that (think along the lines "hi guys, the following paste aint working at line 134" where said paste is your company "secret sauce" recipe. From a technical viewpoing, IRC can be easily isolated network-wise and running it from a dedicated up-to-date firewalled VM can alleviate a lot of issues (cloudburst-like exploits notwithstanding). On 06/18/2011 09:47 PM, Dennis Dayman wrote:
Looking for some pros cons to having IRC connectivity in a corporate environment. Our R&D guys would like to join some coding channels to get ideas and help, but we are hesitating to allow them for fear of a possible hole being opened via an IRC channel and client. thoughts on pro's or cons? what is the beat way to implement if it is deemed ok? -Dennis ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
-- What is the air-speed velocity of an unladen swallow? ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- IRC in corporate enviroment Dennis Dayman (Jun 20)
- Re: IRC in corporate enviroment AK (Jun 23)
- Re: IRC in corporate enviroment securityfocus . com (Jun 23)
- Re: IRC in corporate enviroment MaddHatter (Jun 26)
- Re: IRC in corporate enviroment Dennis Dayman (Jun 23)
- RE: IRC in corporate enviroment McLean, Thomas (Jun 26)
- Re: IRC in corporate enviroment Joel Eriksson (Jun 27)
- Re: IRC in corporate enviroment Todd Haverkos (Jun 26)