In message <3 .
0 .
32 .
19961231145712 .
00a49df8 @
lexicon .
ins .
com>,
Brad Daugherty slapped a few random keys to produce:
>>> I don't see how CDROM provides significant advantages on a WEB
server
>>> "graffiti" attack.
>
>In order to avoid graffiti try something like this:
>
>1)Write a program that checks the size/date of the WWW directory
> If it fails have it Kill the WWW server
> and send email to the admin.
>2)Setup a CRON job to run the program every 15 min.
>
>If a hacker is good enough they will find it, but who would be looking
for suc
>h a random thing?
>
>Just make sure you change the size whenever you make a change to your
document
>s.
Or better yet, incorperate tripwire with MD5 file signatures into this
scheme instead of rolling your own. Use perl to scan for perticular
files
that may have changed taking guestbooks "public" growable files into
account.
Some ideas,
Ian
Follow-Ups:
|
|
