[Andy Sjostrom]

http://edition.cnn.com/2003/TECH/internet/07/03/hacker.warnings.ap/index.html

A global hacker / cracker contest is rumoured to take place tomorrow, July the 6th. The contest is called Defacers Challenge and has web site of its own. According to CNN, "the Department of Homeland Security said Wednesday it was aware of the hackers' plans but did not expect to issue any formal public warnings. The Chief Information Officers Council, part of the Office of Management and Budget, cautioned U.S. agencies and instructed experts to tighten security at federal Web sites."

If you run a web site, I suggest you make sure all the latest security patches and updates have been applied. I recently read from a public security newsgroup the following statement about the contest: "Supposedly its true but don't let that make you think you have to switch your servers off this weekend to be safe or that you don't have to worry about this problem at any other time of the year. Hackers are always with us."

While on the subject of security! If you believe you have found a security vulnerability affecting a Microsoft product you can always contact Microsoft Security Response Center either by e-mail (secure@microsoft.com) or by filling out this web form.

[Andy Sjostrom]

http://edition.cnn.com/2003/TECH/internet/07/03/hacker.warnings.ap/index.html

A global hacker / cracker contest is rumoured to take place tomorrow, July the 6th. The contest is called Defacers Challenge and has web site of its own. According to CNN, "the Department of Homeland Security said Wednesday it was aware of the hackers' plans but did not expect to issue any formal public warnings. The Chief Information Officers Council, part of the Office of Management and Budget, cautioned U.S. agencies and instructed experts to tighten security at federal Web sites."

If you run a web site, I suggest you make sure all the latest security patches and updates have been applied. I recently read from a public security newsgroup the following statement about the contest: "Supposedly its true but don't let that make you think you have to switch your servers off this weekend to be safe or that you don't have to worry about this problem at any other time of the year. Hackers are always with us."

While on the subject of security! If you believe you have found a security vulnerability affecting a Microsoft product you can always contact Microsoft Security Response Center either by e-mail (secure@microsoft.com) or by filling out this web form.

[Kevin C. Tofel]

Just for kicks, I took a look at the site that is organizing this. Ironically, the winner gets something else for everyone to hack:

500mb of hosting
webmail
email forward (limitless)
Domain Name (that YOU choose)

It's almost like awarding a gasoline generator to the Greenpeace effort that causes the most uproar...... :idontthinkso:

[Elad Yakobowicz]

Good luck to all sites tomorrow. Be safe. uppydogeyes:

[Ed Hansberry]

Don't people have anything better to do? :roll:

[sponge]

Originally Posted by Andy Sjostrom

While on the subject of security! If you believe you have found a security vulnerability affecting a Microsoft product you can always contact Microsoft Security Response Center either by e-mail (secure@microsoft.com) or by filling out this web form.

Hah! Good luck with getting anything useful from that.

http://www.pivx.com/larholm/unpatched/

Also see the XBox hackers, which are mislabelled (note: they're still idiots) but did try to get in contact with MS for 2 months.

Besides, this is getting everyone to worry about security right? So it's not like "they don't have anything better to do" they're getting sites to ramp up security. Anyone who gets hacked now is basically due to their own stupidity.

[Ed Hansberry]

Originally Posted by sponge

Besides, this is getting everyone to worry about security right? So it's not like "they don't have anything better to do" they're getting sites to ramp up security.

So, you won't mind if I break into your house and make a mess to show you you could do a better job of personal security? :roll:

[Vincent M Ferrari]

Great...

Stay tuned for the next episode of script-kiddies-run-amok... :devilboy:

Keep puffing out your chests boys; at the end of the day, you still ain't nothin'

[Pony99CA]

Originally Posted by Ed Hansberry

So, you won't mind if I break into your house and make a mess to show you you could do a better job of personal security? :roll:

Bingo! I love the cracker claims that they're just illustrating the lack of security. If they're really so good, why not offer their services as security testers before hacking into a site?

Even if they do hack into a Web site, do they really have to deface it? If their ego requires changing something, instead of a big, gaudy "This site hacked by L00zers" message, they could just put something at the bottom of the page and then notify the Web master of the site. Of course, that's just a matter of degree, like doing a big burglary vs. a small one.

Yes, people without security are pretty foolish, but being foolish should not be taken as an offer to be hacked, just like leaving my front door open should not be taken as consent to steal my belongings.

Steve

[sponge]

I VERY highly doubt that they're doing it to prove that security is a problem (if so, it's just a reason to hack) but nevertheless, this will make sure your securtity on your webserver is up to snuff.

Using the house analogy, if there were a burglar going around in your neighborhood, and he announced he was going to raid everyone's houses on a night, are you going to make sure your house is safe, or are you just going to complain about the criminals?

[Pony99CA]

Originally Posted by sponge

I VERY highly doubt that they're doing it to prove that security is a problem (if so, it's just a reason to hack) but nevertheless, this will make sure your securtity on your webserver is up to snuff.

If I want to know if my Web server security is good, I'll pay someone to test it. If somebody wants to test it for free, they can ask for permission.

Originally Posted by sponge

Using the house analogy, if there were a burglar going around in your neighborhood, and he announced he was going to raid everyone's houses on a night, are you going to make sure your house is safe, or are you just going to complain about the criminals?

I'm going to call the cops and have them stake out my neighborhood.

By the way, did you miss where I said people without security are foolish? However, lack of security in no way mitigates criminal behavior. The only reason we have security is because most of us are realistic enough to understand that there are losers out there.

Steve