[clug] Secure your Internet facing stuff (was Re: googlebot doing funny things in logs)

[Brendan Jurd]

On 18 June 2011 17:33, Bob Edwards <bob at cs.anu.edu.au> wrote:
> However, I thought it might be more helpful, in the spirit of CLUG,
> to hold some sort of "audit-off" night (possibly also known as a
> "crackfest"). My idea would be that during the evening, if you can
> demonstrate beyond a reasonable doubt that you own or administer a
> particular web site, then you can invite those attending to probe and
> otherwise audit your sites security. If and when we discover weaknesses
> we'll provide advice on how to fix them up etc.
>
> I propose we only do this at a live event and not over e-mail etc.
> in case we uncover serious issues which we don't want to advertise to
> the world until they can be sorted out.
>
> I reckon such an event could be both educational and helpful in the
> spirit of CLUG. What do others think?

I think it's a fine idea!  I'd be very happy to put my server's feet
to the fire in this way.

Cheers,
BJ