How secure are your servers? Check this out...

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Varius
    Confirmed User
    • Jun 2004
    • 6890
    #1

    How secure are your servers? Check this out...

    We have installed a new verification system on our gateway server (the sole point of entry on our network).

    Check this out:

    Each person who needs access is given a pager-like device. This device displays a 6-digit random sequence that changes EVERY 10 SECONDS.

    When you login to the server, through SSH or SCP, you are prompted for your name as usual. Then instead of password, you get:

    PASSCODE:

    which is a 4 digit PIN you choose + the 6 digits you see on the pager-thing.

    Then it asks you to wait until the numbers change (so max 10 seconds) and enter that sequence.

    If all is good, yo get in. If not, you're stuck outside.

    This is awesome to me, as even if someone broke your code and the sequence (which is already next-to-impossible), they would then only have 10 seconds to get the next sequence.

    How secure are you ??
    Skype variuscr - Email varius AT gmail
    Tags: None
    • JSA Matt
      So Fucking Banned
      • Aug 2003
      • 5464
      #2
      what are you hiding?

        Comment

        • piker
          Confirmed User
          • Feb 2004
          • 597
          #3
          Yes, but does that secure you from a pissed off employee? or someone he doesnt enter that way?
          IcooCash - DVD Content for your TGP
          Cheap FreeBSD Virtual Hosting
          ICQ me at 605104 for Custom PHP/MySQL Programming

            Comment

            • Varius
              Confirmed User
              • Jun 2004
              • 6890
              #4
              Originally posted by JSA Matt
              what are you hiding?
              The real addresses and names of everyone GFY hehe
              Skype variuscr - Email varius AT gmail

                Comment

                • liquidmoe
                  Confirmed User
                  • Mar 2002
                  • 4994
                  #5
                  That prevents people from entering by guessing common passwords or otherwise discovering a password since the passes would change every 10 seconds. However, most servers are broken into through imporperly configured system daemons or taking advantage of holes in software or the OS itself. Which doesnt have anything to do with knowing or entering the password, so for those kind of breakins that system you implemented doesnt do anything to protect your servers.

                  Take Luck!

                    Comment

                    • Varius
                      Confirmed User
                      • Jun 2004
                      • 6890
                      #6
                      Originally posted by piker
                      Yes, but does that secure you from a pissed off employee? or someone he doesnt enter that way?
                      Employees don't have access to our real network. Only a demo network.

                      Only myself, our SysAdmin and our CTO have access (and a pager-thingy).

                      Aside from that....how else do you expect them to be able to enter by ??
                      Skype variuscr - Email varius AT gmail

                        Comment

                        • exposed
                          Confirmed User
                          • Aug 2004
                          • 1449
                          #7
                          Originally posted by Varius
                          We have installed a new verification system on our gateway server (the sole point of entry on our network).

                          Check this out:

                          Each person who needs access is given a pager-like device. This device displays a 6-digit random sequence that changes EVERY 10 SECONDS.

                          When you login to the server, through SSH or SCP, you are prompted for your name as usual. Then instead of password, you get:

                          PASSCODE:

                          which is a 4 digit PIN you choose + the 6 digits you see on the pager-thing.

                          Then it asks you to wait until the numbers change (so max 10 seconds) and enter that sequence.

                          If all is good, yo get in. If not, you're stuck outside.

                          This is awesome to me, as even if someone broke your code and the sequence (which is already next-to-impossible), they would then only have 10 seconds to get the next sequence.

                          How secure are you ??

                          It's called a secureID smart guy
                          "I felt victimized by the Ian Eisenbergs of the world" - Mary Burger

                            Comment

                            • toddler
                              Confirmed User
                              • Jun 2002
                              • 1911
                              #8
                              Its called a SecureID. I've been using one for 8 years now. Course, mine is an 8 char alpha passcode + 6 digit rotating PIN that changes every 60 seconds.


                              VERY handy...course, you all should be using ssh anyway, or scp at the least. ssh+secureID is teh shit.
                              http://www.flickr.com/photos/zoddler/

                                Comment

                                • Varius
                                  Confirmed User
                                  • Jun 2004
                                  • 6890
                                  #9
                                  Originally posted by liquidmoe
                                  That prevents people from entering by guessing common passwords or otherwise discovering a password since the passes would change every 10 seconds. However, most servers are broken into through imporperly configured system daemons or taking advantage of holes in software or the OS itself. Which doesnt have anything to do with knowing or entering the password, so for those kind of breakins that system you implemented doesnt do anything to protect your servers.
                                  Well, first we run FreeBSD which is less exploited than Windows/Linux to my knowledge.

                                  Second, none of our servers have external IP addresses, so they cannot be reached. He would have to exploit our BigIP F5s, which is quite difficult to do.
                                  Skype variuscr - Email varius AT gmail

                                    Comment

                                    • sirrobin
                                      Confirmed User
                                      • Jun 2003
                                      • 453
                                      #10
                                      my bank uses this for online banking - very cool system until you loose the fucking device and have to wait a month to get a new one.
                                      SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

                                        Comment

                                        • AlienQ - BANNED FOR LIFE
                                          best designer on GFY
                                          • Mar 2003
                                          • 30307
                                          #11
                                          Thats pretty fucken solid.

                                            Comment

                                            • Varius
                                              Confirmed User
                                              • Jun 2004
                                              • 6890
                                              #12
                                              Originally posted by exposed
                                              It's called a secureID smart guy
                                              Ours is actually a "SecurID", one less 'e'

                                              However yes, you are right. It's still a nice system though
                                              Skype variuscr - Email varius AT gmail

                                                Comment

                                                • Varius
                                                  Confirmed User
                                                  • Jun 2004
                                                  • 6890
                                                  #13
                                                  Originally posted by toddler
                                                  Its called a SecureID. I've been using one for 8 years now. Course, mine is an 8 char alpha passcode + 6 digit rotating PIN that changes every 60 seconds.


                                                  VERY handy...course, you all should be using ssh anyway, or scp at the least. ssh+secureID is teh shit.
                                                  Wow 8 years? We only became aware of it about 2 years ago, but didn't bother until now...
                                                  Skype variuscr - Email varius AT gmail

                                                    Comment

                                                    • toddler
                                                      Confirmed User
                                                      • Jun 2002
                                                      • 1911
                                                      #14
                                                      Originally posted by Varius
                                                      Wow 8 years? We only became aware of it about 2 years ago, but didn't bother until now...
                                                      Its matter of how much of a target you are. At one point we had 12,000 remote users.
                                                      http://www.flickr.com/photos/zoddler/

                                                        Comment

                                                        • wdsguy
                                                          Ryde or Die
                                                          • Dec 2002
                                                          • 19568
                                                          #15
                                                          how much is this thing costing u?

                                                            Comment

                                                            • Shoehorn!
                                                              Die With Your Boots On
                                                              • Oct 2003
                                                              • 22872
                                                              #16
                                                              Originally posted by Varius
                                                              We have installed a new verification system on our gateway server (the sole point of entry on our network).

                                                              Check this out:

                                                              Each person who needs access is given a pager-like device. This device displays a 6-digit random sequence that changes EVERY 10 SECONDS.

                                                              When you login to the server, through SSH or SCP, you are prompted for your name as usual. Then instead of password, you get:

                                                              PASSCODE:

                                                              which is a 4 digit PIN you choose + the 6 digits you see on the pager-thing.

                                                              Then it asks you to wait until the numbers change (so max 10 seconds) and enter that sequence.

                                                              If all is good, yo get in. If not, you're stuck outside.

                                                              This is awesome to me, as even if someone broke your code and the sequence (which is already next-to-impossible), they would then only have 10 seconds to get the next sequence.

                                                              How secure are you ??
                                                              That's pretty fucking cool. People who bank through Swedish banks get a similar thing, it looks like a little calculator and it generates a code to enter when they log onto their account through internet banking.

                                                                Comment

                                                                • garett
                                                                  Confirmed User
                                                                  • Mar 2004
                                                                  • 683
                                                                  #17
                                                                  Originally posted by Varius
                                                                  Employees don't have access to our real network. Only a demo network.

                                                                  Only myself, our SysAdmin and our CTO have access (and a pager-thingy).

                                                                  Aside from that....how else do you expect them to be able to enter by ??
                                                                  Is this network located in the same office as your employees ?

                                                                  If there's no physical security there's no security. If I wanted to 'hack' into a server all I would need is a screwdriver and a key to the building. Just keep that in mind.

                                                                    Comment

                                                                    • ytcracker
                                                                      stc is the greatest
                                                                      • Dec 2002
                                                                      • 12403
                                                                      #18
                                                                      securid is old school

                                                                      i even rap about it in some old songs

                                                                      my dad used to have to use it to log on to lockheeds ip network
                                                                      www.ytcracker.com | www.digitalgangster.com
                                                                      i love you

                                                                        Comment

                                                                        • Volantt
                                                                          Confirmed User
                                                                          • Nov 2003
                                                                          • 745
                                                                          #19
                                                                          Over kill

                                                                          Hackers = holes, exploits, and poor configurations.
                                                                          "Only the dead have seen the end of war." - Plato
                                                                          "In the abscence of orders, go find something and kill it." - Erwin Rommel
                                                                          "A man's worth is no greater then the worth of his ambitions." - Marcus Aurelius

                                                                            Comment

                                                                            • garett
                                                                              Confirmed User
                                                                              • Mar 2004
                                                                              • 683
                                                                              #20
                                                                              Originally posted by Varius
                                                                              Well, first we run FreeBSD which is less exploited than Windows/Linux to my knowledge.

                                                                              Second, none of our servers have external IP addresses, so they cannot be reached. He would have to exploit our BigIP F5s, which is quite difficult to do.
                                                                              Well see above .. if the employees have physical access then your security is dead. You have none. Even if it's on a local network.

                                                                              As for FreeBSD .. I wouldn't count on your OS choice for protection. Especially because FreeBSD and Linux run mostly the same software. For example, if you're using Apache then apache is apache .. it doesn't matter what operating system you're using.

                                                                              It mostly comes down to two things.. 1) how the machine was configured and 2) are there any exploitable bugs in the code for any of the software that you're running.

                                                                              The only exception to the above is OpenBSD. It has a reputation for security because every single piece of software in the default install is audited to try and weed out exploitable bugs .. and the guys behind it know their shit when it comes to security so the default install is automatically configured to be lock-tight. However, if you install 3rd party software then that paradigm goes down the drain.
                                                                              Last edited by garett; 08-31-2004, 03:40 PM.

                                                                                Comment

                                                                                • Varius
                                                                                  Confirmed User
                                                                                  • Jun 2004
                                                                                  • 6890
                                                                                  #21
                                                                                  Originally posted by garett
                                                                                  Is this network located in the same office as your employees ?

                                                                                  If there's no physical security there's no security. If I wanted to 'hack' into a server all I would need is a screwdriver and a key to the building. Just keep that in mind.
                                                                                  We're also a hosting company, so servers are in their own cage up in Montreal datacenter (Peer1). All our devel team is here in Costa Rica though
                                                                                  Skype variuscr - Email varius AT gmail

                                                                                    Comment

                                                                                    • Varius
                                                                                      Confirmed User
                                                                                      • Jun 2004
                                                                                      • 6890
                                                                                      #22
                                                                                      Originally posted by wdsguy
                                                                                      how much is this thing costing u?
                                                                                      Not sure, checkout RSA's site...I don't pay the bills here =)
                                                                                      Skype variuscr - Email varius AT gmail

                                                                                        Comment

                                                                                        • Varius
                                                                                          Confirmed User
                                                                                          • Jun 2004
                                                                                          • 6890
                                                                                          #23
                                                                                          Originally posted by garett
                                                                                          Well see above .. if the employees have physical access then your security is dead. You have none. Even if it's on a local network.

                                                                                          As for FreeBSD .. I wouldn't count on your OS choice for protection. Especially because FreeBSD and Linux run mostly the same software. For example, if you're using Apache then apache is apache .. it doesn't matter what operating system you're using.

                                                                                          It mostly comes down to two things.. 1) how the machine was configured and 2) are there any exploitable bugs in the code for any of the software that you're running.

                                                                                          The only exception to the above is OpenBSD. It has a reputation for security because every single piece of software in the default install is audited to try and weed out exploitable bugs .. and the guys behind it know their shit when it comes to security so the default install is automatically configured to be lock-tight. However, if you install 3rd party software then that paradigm goes down the drain.
                                                                                          They still have to get through to the webservers (to attack something like Apache)...which means they must break through the load-balancer (F5) first.
                                                                                          Skype variuscr - Email varius AT gmail

                                                                                            Comment

                                                                                            • Varius
                                                                                              Confirmed User
                                                                                              • Jun 2004
                                                                                              • 6890
                                                                                              #24
                                                                                              Originally posted by ytcracker
                                                                                              securid is old school

                                                                                              i even rap about it in some old songs

                                                                                              my dad used to have to use it to log on to lockheeds ip network
                                                                                              How much longer before I can see a rap about IwantU ?
                                                                                              Skype variuscr - Email varius AT gmail

                                                                                                Comment

                                                                                                • Crypt
                                                                                                  Confirmed User
                                                                                                  • Apr 2004
                                                                                                  • 2225
                                                                                                  #25
                                                                                                  Originally posted by Varius
                                                                                                  We're also a hosting company, so servers are in their own cage up in Montreal datacenter (Peer1). All our devel team is here in Costa Rica though
                                                                                                  I saw your cage when i made a visit to peer1 office ;) how the fuck someone can work in a litle place like this? the cage is totally full ;) you hired a midget?

                                                                                                  lol

                                                                                                    Comment

                                                                                                    • Varius
                                                                                                      Confirmed User
                                                                                                      • Jun 2004
                                                                                                      • 6890
                                                                                                      #26
                                                                                                      Originally posted by Crypt
                                                                                                      I saw your cage when i made a visit to peer1 office ;) how the fuck someone can work in a litle place like this? the cage is totally full ;) you hired a midget?

                                                                                                      lol
                                                                                                      hehe yeah they had to get a bigger cage and merge two cages into one for us.

                                                                                                      We got our man Jeff to fit in there though.....we only feed him once a week
                                                                                                      Skype variuscr - Email varius AT gmail

                                                                                                        Comment

                                                                                                        • Fukeneh
                                                                                                          Confirmed User
                                                                                                          • Mar 2004
                                                                                                          • 1245
                                                                                                          #27
                                                                                                          yes there are indeed ways around that.

                                                                                                          and its not new. that is basically the same method AOL has been using for thier Internal employees and everyone else on their lan for many years now. there are a number of other businesses using PIN based logins that are calculated on pager like devices.

                                                                                                            Comment

                                                                                                            • Crypt
                                                                                                              Confirmed User
                                                                                                              • Apr 2004
                                                                                                              • 2225
                                                                                                              #28
                                                                                                              Originally posted by Varius
                                                                                                              hehe yeah they had to get a bigger cage and merge two cages into one for us.

                                                                                                              We got our man Jeff to fit in there though.....we only feed him once a week
                                                                                                              haha

                                                                                                                Comment

                                                                                                                • bringer
                                                                                                                  i have man boobies
                                                                                                                  • Jul 2003
                                                                                                                  • 13082
                                                                                                                  #29
                                                                                                                  who cares? if i beat the 4digit code out of you and steal your pager, im in
                                                                                                                  but why does burgerking really need all that security anyways?
                                                                                                                  333-765-551

                                                                                                                    Comment

                                                                                                                    • garett
                                                                                                                      Confirmed User
                                                                                                                      • Mar 2004
                                                                                                                      • 683
                                                                                                                      #30
                                                                                                                      Originally posted by Varius
                                                                                                                      They still have to get through to the webservers (to attack something like Apache)...which means they must break through the load-balancer (F5) first.
                                                                                                                      Huh? Why ?

                                                                                                                      Let's say you've got 5 web servers behind one load balancer... and they're all running the same version of apache, configured the same way (that's a safe assumption in most cases) and I happen to know of an exploit that just might work on that version of apache.

                                                                                                                      I run my exploit, it goes through your load balancer, to one of the 5 webservers, exploits the bug and
                                                                                                                      bam I have a shell running as the httpd user (or whatever user apache is running as) on that webserver.

                                                                                                                      Sure I've only cracked one of the 5 servers .. but who cares ? Now I poke around and see that the dumbass sysadmin that installed this box left an exploitable version of sendmail running even though it's not being used (it happens quite often) .. I exploit it and I have root.

                                                                                                                      Now I own your webserver. Sure if I log out I lose the exploited one .. but I can still grab sensitive information while I'm there .. and I can always re-run the exploit later on and get another server. The load balancer is not an issue here at all.. it passes everything through port 80 to one of the 5 servers .. it doesn't care what's being passed through.

                                                                                                                      Unless I'm missing something.

                                                                                                                        Comment

                                                                                                                        • picpile
                                                                                                                          Confirmed User
                                                                                                                          • Nov 2001
                                                                                                                          • 734
                                                                                                                          #31
                                                                                                                          Originally posted by garett
                                                                                                                          Huh? Why ?

                                                                                                                          Let's say you've got 5 web servers behind one load balancer... and they're all running the same version of apache, configured the same way (that's a safe assumption in most cases) and I happen to know of an exploit that just might work on that version of apache.

                                                                                                                          I run my exploit, it goes through your load balancer, to one of the 5 webservers, exploits the bug and
                                                                                                                          bam I have a shell running as the httpd user (or whatever user apache is running as) on that webserver.

                                                                                                                          Sure I've only cracked one of the 5 servers .. but who cares ? Now I poke around and see that the dumbass sysadmin that installed this box left an exploitable version of sendmail running even though it's not being used (it happens quite often) .. I exploit it and I have root.

                                                                                                                          Now I own your webserver. Sure if I log out I lose the exploited one .. but I can still grab sensitive information while I'm there .. and I can always re-run the exploit later on and get another server. The load balancer is not an issue here at all.. it passes everything through port 80 to one of the 5 servers .. it doesn't care what's being passed through.

                                                                                                                          Unless I'm missing something.
                                                                                                                          good post, people don;t hack servers by cracking passwords, thats so 1990

                                                                                                                            Comment

                                                                                                                            • JohnnyUtah
                                                                                                                              Confirmed User
                                                                                                                              • Oct 2002
                                                                                                                              • 826
                                                                                                                              #32
                                                                                                                              Yep, this key thing is good if your a newbie and wanna get root access to a box. Trust me...no real Ha0ker will ever use the normal port 22 to get in.

                                                                                                                              The real deal is a tcp wrapper who only allows your own ip in or only allows physical onsite access to the server. Close all fucking useless ports. Thats way more secure than any other rotating beeper crap....

                                                                                                                              my 2 cents
                                                                                                                              Last edited by JohnnyUtah; 08-31-2004, 03:57 PM.

                                                                                                                                Comment

                                                                                                                                • Fukeneh
                                                                                                                                  Confirmed User
                                                                                                                                  • Mar 2004
                                                                                                                                  • 1245
                                                                                                                                  #33
                                                                                                                                  basically no network is bulletproof from breakins. if there is a will there IS a way.

                                                                                                                                  SID;s are bullshit. not really a big help as there are many ways around it. its kind of like when MS or someone released the new keyboards with fingerprint identification, within the day at the same convention someone showed a very easy way to exploit it.... dust, tape, and a clean drinking glass.

                                                                                                                                    Comment

                                                                                                                                    • sumphatpimp
                                                                                                                                      Confirmed User
                                                                                                                                      • Aug 2002
                                                                                                                                      • 5235
                                                                                                                                      #34
                                                                                                                                      pagers listen to a radio signal and so can anyone else

                                                                                                                                        Comment

                                                                                                                                        • Varius
                                                                                                                                          Confirmed User
                                                                                                                                          • Jun 2004
                                                                                                                                          • 6890
                                                                                                                                          #35
                                                                                                                                          Originally posted by garett
                                                                                                                                          Huh? Why ?

                                                                                                                                          Let's say you've got 5 web servers behind one load balancer... and they're all running the same version of apache, configured the same way (that's a safe assumption in most cases) and I happen to know of an exploit that just might work on that version of apache.

                                                                                                                                          I run my exploit, it goes through your load balancer, to one of the 5 webservers, exploits the bug and
                                                                                                                                          bam I have a shell running as the httpd user (or whatever user apache is running as) on that webserver.

                                                                                                                                          Sure I've only cracked one of the 5 servers .. but who cares ? Now I poke around and see that the dumbass sysadmin that installed this box left an exploitable version of sendmail running even though it's not being used (it happens quite often) .. I exploit it and I have root.

                                                                                                                                          Now I own your webserver. Sure if I log out I lose the exploited one .. but I can still grab sensitive information while I'm there .. and I can always re-run the exploit later on and get another server. The load balancer is not an issue here at all.. it passes everything through port 80 to one of the 5 servers .. it doesn't care what's being passed through.

                                                                                                                                          Unless I'm missing something.
                                                                                                                                          Hrmm good point. I'm not familar with any exploits and such as I haven't done any network amdinistration for years.....I leave that upto our SysAdmin now.

                                                                                                                                          The only system I still work with is our NetApps.

                                                                                                                                          Maybe I should stop replying now since you guys know more about the security/exploits stuff than I
                                                                                                                                          Skype variuscr - Email varius AT gmail

                                                                                                                                            Comment

                                                                                                                                            • Varius
                                                                                                                                              Confirmed User
                                                                                                                                              • Jun 2004
                                                                                                                                              • 6890
                                                                                                                                              #36
                                                                                                                                              Originally posted by bringer
                                                                                                                                              who cares? if i beat the 4digit code out of you and steal your pager, im in
                                                                                                                                              but why does burgerking really need all that security anyways?
                                                                                                                                              People get stabbed and shot all the time in Burger King in Montreal
                                                                                                                                              Skype variuscr - Email varius AT gmail

                                                                                                                                                Comment

                                                                                                                                                • toddler
                                                                                                                                                  Confirmed User
                                                                                                                                                  • Jun 2002
                                                                                                                                                  • 1911
                                                                                                                                                  #37
                                                                                                                                                  Originally posted by sumphatpimp
                                                                                                                                                  pagers listen to a radio signal and so can anyone else
                                                                                                                                                  its not a pager
                                                                                                                                                  http://www.flickr.com/photos/zoddler/

                                                                                                                                                    Comment

                                                                                                                                                    • toddler
                                                                                                                                                      Confirmed User
                                                                                                                                                      • Jun 2002
                                                                                                                                                      • 1911
                                                                                                                                                      #38
                                                                                                                                                      Originally posted by Fukeneh
                                                                                                                                                      basically no network is bulletproof from breakins. if there is a will there IS a way.

                                                                                                                                                      SID;s are bullshit. not really a big help as there are many ways around it. its kind of like when MS or someone released the new keyboards with fingerprint identification, within the day at the same convention someone showed a very easy way to exploit it.... dust, tape, and a clean drinking glass.
                                                                                                                                                      so, if you have 1 port open on 1 box with ssh listening and tcpwrappers locking sshd down to 1 IP to login, SID is worthless? Uh huh.
                                                                                                                                                      http://www.flickr.com/photos/zoddler/

                                                                                                                                                        Comment

                                                                                                                                                        • rounders
                                                                                                                                                          Confirmed User
                                                                                                                                                          • Sep 2003
                                                                                                                                                          • 2931
                                                                                                                                                          #39
                                                                                                                                                          its called a keyfob
                                                                                                                                                          ICQ#: 153923840

                                                                                                                                                            Comment

                                                                                                                                                            • ytcracker
                                                                                                                                                              stc is the greatest
                                                                                                                                                              • Dec 2002
                                                                                                                                                              • 12403
                                                                                                                                                              #40
                                                                                                                                                              Originally posted by Varius
                                                                                                                                                              How much longer before I can see a rap about IwantU ?
                                                                                                                                                              hahahhaa no idea
                                                                                                                                                              www.ytcracker.com | www.digitalgangster.com
                                                                                                                                                              i love you

                                                                                                                                                                Comment

                                                                                                                                                                • adultentertainment
                                                                                                                                                                  Confirmed User
                                                                                                                                                                  • Dec 2003
                                                                                                                                                                  • 170
                                                                                                                                                                  #41
                                                                                                                                                                  i'm secure in who i am.
                                                                                                                                                                  love da biz

                                                                                                                                                                    Comment

                                                                                                                                                                    • Varius
                                                                                                                                                                      Confirmed User
                                                                                                                                                                      • Jun 2004
                                                                                                                                                                      • 6890
                                                                                                                                                                      #42
                                                                                                                                                                      Originally posted by ytcracker
                                                                                                                                                                      hahahhaa no idea
                                                                                                                                                                      I'll make you profile of the week

                                                                                                                                                                      You'll get mad honeys that way hehe
                                                                                                                                                                      Skype variuscr - Email varius AT gmail

                                                                                                                                                                        Comment

                                                                                                                                                                        • sumphatpimp
                                                                                                                                                                          Confirmed User
                                                                                                                                                                          • Aug 2002
                                                                                                                                                                          • 5235
                                                                                                                                                                          #43
                                                                                                                                                                          I got to wonder, how often do the "pager like device" and the system you are protecting have to be "synced" so that they are using the same numbers?

                                                                                                                                                                            Comment

                                                                                                                                                                            • toddler
                                                                                                                                                                              Confirmed User
                                                                                                                                                                              • Jun 2002
                                                                                                                                                                              • 1911
                                                                                                                                                                              #44
                                                                                                                                                                              Originally posted by sumphatpimp
                                                                                                                                                                              I got to wonder, how often do the "pager like device" and the system you are protecting have to be "synced" so that they are using the same numbers?
                                                                                                                                                                              i've had the same fob for 4 years now, haven't had to resync.

                                                                                                                                                                              Note that you can set it up such that if you fat finger the pass code a certain number of times, it gets locked. Ours is set to 3...
                                                                                                                                                                              http://www.flickr.com/photos/zoddler/

                                                                                                                                                                                Comment

                                                                                                                                                                                • sumphatpimp
                                                                                                                                                                                  Confirmed User
                                                                                                                                                                                  • Aug 2002
                                                                                                                                                                                  • 5235
                                                                                                                                                                                  #45
                                                                                                                                                                                  I figured it would have batteries or something
                                                                                                                                                                                  thus a need for a resync

                                                                                                                                                                                    Comment

                                                                                                                                                                                    • fris
                                                                                                                                                                                      I have to go potty
                                                                                                                                                                                      • Aug 2002
                                                                                                                                                                                      • 55818
                                                                                                                                                                                      #46
                                                                                                                                                                                      Originally posted by Varius
                                                                                                                                                                                      Well, first we run FreeBSD which is less exploited than Windows/Linux to my knowledge.

                                                                                                                                                                                      Second, none of our servers have external IP addresses, so they cannot be reached. He would have to exploit our BigIP F5s, which is quite difficult to do.
                                                                                                                                                                                      our company does paysite risk assement, security audits, we have secured a bunch of people on gfy, because most of the servers arent secure. affils getting hacked, downtime. etc.

                                                                                                                                                                                      its just lazy admins not doing there job right. even if you have a managed server, sometimes they dont know what they are doing.
                                                                                                                                                                                      Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


                                                                                                                                                                                      My Newest Theme

                                                                                                                                                                                        Comment

                                                                                                                                                                                        Previous template Next
                                                                                                                                                                                        Working...