[dundee] Linux Security & Botnets

[gordon dunlop]

The news this week is about Linux botnets, this has been going on for
the past year or so. It is not about the security of Linux or Apache
but about the security of data centers. A data center holds
information about farms of servers that operate Linux servers and
holds pertinent information including root passwords of servers that
operate thousands of web sites. a root kit can only deployed on Linux
servers if the root password is known. Data centers can be
compromised, electronically this can be hard, easier to get an
employee to get the necessary information. So security is not just
electronically but also human, this is just conjecture but until the
security leak is defined and answered then the problem is not solved.
It begs the question, how often must one change the security password
in case of compromise of upstream systems. To all the ethical hackers
this presents an opportunity for your ideas of security and how to
create secure systems to minimize this type of occurrence. I hope this
gives you brain storming ideas.

Gordon