[Wolves] Scumbags Hack Xoops site

[Peter Cannon]

On Thursday 20 October 2005 16:26, David Goodwin wrote:

> Unfortunately CMS's become quite large in terms of lines of code, and
> it's relatively easy for bugs to creep in.

The Drupal is very nice but a bit OTT on the management side, like most things 
is double edged, you get lots and lots of options, allow this, turn that off, 
show it here blah blah blah.

Now thats good, no thats very good in respect of security but on the downside 
its bad in respect of Muppet's like me using it.

I don't really want to say more as then its pointless me doing a "This is what 
I think" thingy.

Surficed to say I think they all leave the back door open in respect of 
modules etc, I think we've got blase in respect of installing stuff that Joe 
Public has submitted. Most of the sites have disclaimers but of course when 
its downloaded from say Xoops subconsciously you think "Its from them it must 
be OK"

Xoops don't give much more detail regrading what happened, I don't use it but 
I still think its a disgrace.

-- 
Regards
Peter Cannon
Fedora Core 4 & Suse 9.3

"There is every excuse for not knowing,
There is no excuse for not asking!"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.lug.org.uk/pipermail/wolves/attachments/20051020/bf039e69/attachment.bin