[clug] Secure your Internet facing stuff (was Re: googlebot doing funny things in logs)

[Martijn van Oosterhout]

On Fri, Jun 17, 2011 at 11:36:30AM +1000, Robert Edwards wrote:
> So that's another no? Still somewhat hypothetical at this stage?

Personally, I'd say any bank that only used username/password
authentication should have their licence revoked. It's just
irresponsible these days.

Banks that provide any kind of customer service are likely to do what
they can if it's any significant kind of money.  Situations where it
really goes wrong are not likely to reach the news anyway, nobody
involved has any interest in publicising cases that go wrong.

In the end the money mules are the real losers, they're the ones who
get caught and told they can't hold a bank account for 7 years. 

But back the issue of unprotected machines on the internet, they do
cause this kind of thing:

http://www.dutchdailynews.com/rabobank-ddos-attack/

Ah, but it only cost a few million and nobody got killed so it's ok.

I don't have problems with people wanting to running their own servers,
but if they start hosting malware or taking part in a DDOS they should
simply be disconnected without warning and fined.

Have a nice day,
-- 
Martijn van Oosterhout   <kleptog at svana.org>   http://svana.org/kleptog/
> Patriotism is when love of your own people comes first; nationalism,
> when hate for people other than your own comes first. 
>                                       - Charles de Gaulle
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/linux/attachments/20110617/c5a19d66/attachment.pgp>