<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
Employee: "Uh oh, looks like The Bobs are in town. I better get my
resume updated!<br>
<br>
-mb<br>
<br>
<br>
On 06/21/2015 09:42 AM, George Toft wrote:<br>
</div>
<blockquote cite="mid:5586E965.2080708@georgetoft.com" type="cite">I
had a problem like that in 2005. Fancy, high-falutin' Beltway
Bandits (from Wash DC) came to scan our servers. I got called in
(taken from my normal busy routine) to address their concerns . .
.
<br>
<br>
Bandit: "Yes, we see you have over 1200 Apache servers in the
environment."
<br>
<br>
All eyes look at me.
<br>
<br>
Me: "We don't run Apache here."
<br>
<br>
You could hear a pin drop, which in a carpeted room, means it got
real quiet. The three bandits huddle together questioning their
data.
<br>
<br>
Bandit: "Could you explain?"
<br>
<br>
Me: "We use IBM HTTP Server."
<br>
<br>
More bandit discussions. "OK, thank you. We'll let you know if
there is anything else."
<br>
<br>
===================
<br>
<br>
Then there's the every two year audit question: "Please explain
how LDAP enforces password change policy . . ." What? Do you
think this is Active Directory? Sigh . . .
<br>
<br>
Lolz.
<br>
<br>
Regards,
<br>
<br>
George Toft
<br>
<br>
On 6/12/2015 10:14 AM, Keith Smith wrote:
<br>
<blockquote type="cite">
<br>
<br>
I do some work on a couple CentOS 6.6 servers. Payment Card
Industry (PCI) scans seem to always see the server as
vulnerable. I've have to submit for a review since the server is
not really vulnerable.
<br>
<br>
I don't think a lot of people understand how RHEL maintains it's
packages. I know I did not for a long time. RedHat backports
vulnerability fixes while maintaining the original version
number.
<br>
<br>
Here is a great explanation :
<a class="moz-txt-link-freetext" href="https://access.redhat.com/security/updates/backporting/?sc_cid=3093">https://access.redhat.com/security/updates/backporting/?sc_cid=3093</a>
<br>
<br>
Keith
<br>
<br>
---------------------------------------------------
<br>
PLUG-discuss mailing list - <a class="moz-txt-link-abbreviated" href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a>
<br>
To subscribe, unsubscribe, or to change your mail settings:
<br>
<a class="moz-txt-link-freetext" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a>
<br>
<br>
</blockquote>
<br>
---------------------------------------------------
<br>
PLUG-discuss mailing list - <a class="moz-txt-link-abbreviated" href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a>
<br>
To subscribe, unsubscribe, or to change your mail settings:
<br>
<a class="moz-txt-link-freetext" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a>
<br>
</blockquote>
<br>
</body>
</html>