How to Instill Proper Paranoia 5
AN AC sends in: "Those guys at O'ReillyNet are teaching sysadmins to be paranoid."
This discussion has been archived.
No new comments can be posted.
How to Instill Proper Paranoia
Related Links Top of the: day, week, month.
It is clear that the individual who persecutes a man, his brother, because he is not of the same opinion, is a monster. - Voltaire
Paranoia? IIS5? These guys are on serious crack! (Score:2)
Even IIS4 is only just getting to the point where it can be considered reasonably secure, although you have to apply various security patches over and above the last service pack to get it to that point.
I can just hear the wannabes saying "but IIS5 is what comes on Win2K! We can't run IIS5!" Simple answer to that: don't run Win2K on public web servers, either! If you have to run a closed source, Microsoft web server, run IIS4 on NT4. After IIS5 has been out for another year or so, once most of the security violations have been found and patched, then you can start considering migrating to it.
If you're not that patient, switch to a nice stable version of Apache. You know you want to.
Beyond 42... the meaning of life... (Score:2)
- ...User education is a wonderful thing. The junior system admins understand a little more deeply why security patches must be applied immediately -- a little reinforcement never hurts. Some non-technical people understood why, exactly, the senior system administrator frequently had his teeth clenched and a spastic twitch in his left eye. Plus, they understood the importance of security patches. The next time I inconveniently "down" a server to apply a security patch, there won't be nearly as much grumbling.
Clenched teeth... uncontrolled, spastic twitching... perhaps even a good bout of Tourette's syndrome!Oh, wait a minute. I won't be taking down the server. That's what the ex-trainee is for. Maybe I can give him the spastic eye twitch, too.
The BOFH [theregister.co.uk] lives... and he's contagious!
Re:How to install Proper Paranoia (Score:1)
apt-get install proper-paranoia
--
How about a role-playing game to strike fear... (Score:3)
Russell Brand has a role-playing game for system admins. The game would have each person in the security class be the sysadmin of a single system, and it was that person's responsibility to (a) keep the system from being cracked, (b) keep the users from cracking the sysadmin, and (c) keep the boss happy.
I won't go into any details because for the three years he presented this game at a conference I attend, the scenerios were completely different. But I will give you some insight into why the game was very, very good:
1) It was possible (although very, very unlikely!) that a system could chug along without ever being attacked.
2) The game was constantly being updated based on the latest attacks common on the Internet. In other words, each attach scenerio was based on a real-life crack.
3) Russell showed us that it was possible to foil the attackers without being killed by the users, even in a worst-case scenerio.
4) You gain a healthy respect for a pair of dice controlling your life.
Sadly, I've not heard of this game being made available in the past few years. I'll have to check to see what the status of the game is; if there is a version you can "play" on the net, I'll post the fact somewhere.
How to install Proper Paranoia (Score:2)
rpm -i ProperParanoia_0.1.rpm
(Sorry, I read the headline as "How to install
;-)
--