Re: Linux Web Server Hardening (LAMP + Wiki)

[Eric Furman <ericfurman () fastmail net>]

My point was that Microsoft has fixed the security issues with their
windows system while X has refused to even acknowledge there
is a problem. It was to back up my point about how even Microsoft
has taken security more seriously than Linux.
And yes, my initial email was a troll, but it did not change the fact
that
it is true. Security is an attitude. It is not something added after the
fact.
And the prevalent attitude toward security in the vast majority of the
Linux
community is indifference at best and open hostility at worst.
(top posting just to annoy Mr. Wiechers)

On Sat, Feb 2, 2013, at 05:46 AM, Ansgar Wiechers wrote:
> On 2013-02-02 Alex Dolan wrote:
> > On 01/02/2013 3:35 PM, "Ansgar Wiechers" <bugtraq () planetcobalt net> wrote:
> > > M-hm, I see. May I humbly request that this troll be removed from the
> > > list?
> >
> > I don't think removed from the list is necessary.
> > He went about it poorly in his initial reply, but makes some intriguing
> > points in the follow up.
>
> Actually, no, he doesn't. While it's true that X11 does have security
> issues, nobody in his right mind would be running X11 on a server
> (particularly not on an internet-facing one), because this fact is
> already well-known. Besides, if X11 is the issue, the BSDs (or any other
> Unix flavor) would be affected just the same.
>
> > I'm new in security so I'm keen to take in as much information as
> > possible, and trying not to be a one-eyed Linux user
>
> Don't misunderstand. This isn't a debate pro-Linux or anti-BSD or
> something. I'm merely pointing out that Mr. Furman is spreading FUD,
> nothing more.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------