Re: WebDNA security
This WebDNA talk-list message is from 2004
It keeps the original formatting.
numero = 58994
interpreted = N
texte = This article is Part I of a II part series that discusses web server security. It separates the security issue into three main areas. 1. The server offers services to the public it was not intended to offer. 2. The server keeps supposedly private data in publicly accessible areas. 3. The server trusts data from untrustworthy sources. http://www.devshed.com/c/a/Administration/Webserver-Security-Part-I/ In addition to great information, the article offers links to resources to help secure your web server. Salvatore D'Anna DotNetNuke Hosting -----Original Message----- From: WebDNA Talk [mailto:WebDNA-Talk@talk.smithmicro.com] On Behalf Of Patrick McCormick Sent: Friday, August 06, 2004 8:31 AM To: WebDNA Talk Subject: WebDNA security I sat through a meeting with an IT department at an insurance company yesterday. The head of IT told the group that he had never heard of WebDNA and that it was "...a weird, third-party, add-on" and further, that he wouldn't even consider it for his web server because of all the publicity PHP has received for its security flaws. Yes, the stench of self-preservation is one of very few constants in business. One particular point that IT dude was trying to make is that simply running WebDNA on a machine exposes that machine to hacking. I'm wondering if anyone on the lise has had a security analysis done on a running copy of WebDNA, possibly by an organization specializing in security analysis. I think all of us recognize that the quality of our code has much more impact on security than simply running a copy of WebDNA. But, separating that code from the discussion, is there any information about the security pros and cons of WebDNA versus alternatives? Thanks, Pat McCormick ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ __________ NOD32 1.834 (20040804) Information __________ This message was checked by NOD32 antivirus system. http://www.nod32.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
This article is Part I of a II part series that discusses web server security. It separates the security issue into three main areas. 1. The server offers services to the public it was not intended to offer. 2. The server keeps supposedly private data in publicly accessible areas. 3. The server trusts data from untrustworthy sources. http://www.devshed.com/c/a/Administration/Webserver-Security-Part-I/ In addition to great information, the article offers links to resources to help secure your web server. Salvatore D'Anna DotNetNuke Hosting -----Original Message----- From: WebDNA Talk [mailto:WebDNA-Talk@talk.smithmicro.com] On Behalf Of Patrick McCormick Sent: Friday, August 06, 2004 8:31 AM To: WebDNA Talk Subject: WebDNA security I sat through a meeting with an IT department at an insurance company yesterday. The head of IT told the group that he had never heard of WebDNA and that it was "...a weird, third-party, add-on" and further, that he wouldn't even consider it for his web server because of all the publicity PHP has received for its security flaws. Yes, the stench of self-preservation is one of very few constants in business. One particular point that IT dude was trying to make is that simply running WebDNA on a machine exposes that machine to hacking. I'm wondering if anyone on the lise has had a security analysis done on a running copy of WebDNA, possibly by an organization specializing in security analysis. I think all of us recognize that the quality of our code has much more impact on security than simply running a copy of WebDNA. But, separating that code from the discussion, is there any information about the security pros and cons of WebDNA versus alternatives? Thanks, Pat McCormick ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ __________ NOD32 1.834 (20040804) Information __________ This message was checked by NOD32 antivirus system. http://www.nod32.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
"Sal D'Anna"
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Sku numbers (1997)
Multiple Merchant Accounts? (1997)
Questions (1998)
Math (1997)
math on date? (1997)
how do you and/or in a search? (1997)
[Sum] function? (1997)
shownext (2001)
WebCat2b14MacPlugIn - [include] doesn't hide the search string (1997)
WebCatalog NT beta 18 problem (1997)
Close Databases Crash? (1998)
For those of you not on the WebCatalog Beta... (1997)
My slower response (1997)
Database of Tax Rates? (1997)
WebCommerce: Folder organization ? (1997)
Databases (2000)
no global [username] or [password] displayed ... (1997)
Tiger / WebDNA (2005)
[if][/if] weirdness (2000)
[WebDNA] WebDNA and macOS 10.4 Mojave - Operational? (2018)