Slashdot Mirror

For example, a quick google search turns up this page on apache security.

There isn't really much there that will significantly improve security, except the suggestions to keep Apache up-to-date and maybe installing mod_security. For instance, hiding the Apache version number might actually decrease security since now you might miss yourself you are out of date. It's not going to prevent any attack from happening.

Often times these sites are in fact "negligent" in how they operate. Many were using outdated software with known vulnerabilities or were very poorly configured etc. Your little site in your example almost certainly will not get hacked if you follow some very basic security guidelines. For example, a quick google search turns up this page on apache security. It took 5 seconds of searching, and would probably only take an hour or two to implement and test, and yet how many sites out there aren't following a lot of these guidelines? Apache is free and these guidelines cost very little to implement and test, so I doubt that someone can claim that they were too "expensive".

Your analogy isn't apt, for most of these sites it was like they installed a security system in their house then neglected to arm it or lock the door. Pretty much anyone that is looking for something to hack can come right in.

You mean like this

http://www.petefreitag.com/item/533.cfm

or http://pgl.yoyo.org/lqr/

or http://www.croftsoft.com/library/tutorials/opensource/

or http://www.codinghorror.com/blog/archives/000833.html

All found with a very cursory Search on Google. If these are not enough you could always open a little program called OpenOffice and create one. Given how many of the above are crosslinked, You could find any number of people to host it.

I think though the proper place for your chart is probably at OSI itself

The widespread use of http only cookies is coming upon us

http://msdn2.microsoft.com/en-us/library/ms533046. aspx

http://www.petefreitag.com/item/644.cfm

of course, new rushed in features open nice juicy vectors :
http://ha.ckers.org/blog/20070719/firefox-implemen ts-httponly-and-is-vulnerable-to-xmlhttprequest/

However, the current implementation requires that I have a bloated reader that typically includes Additional Crap (tm) in the installation which installs by default (if even given the option).

Try another PDF viewer. KPDF and XPDF are both great for Linux/X users. For a barebones Windows viewer, try SumatraPDF.

If you're stuck with Adobe Acrobat for some reason, then you might try these instructions to make Acrobat run a lot faster.

Here are some links to some documentation:

http://images.apple.com/pro/pdf/Cin_Disp30_report. pdf
http://weblog.infoworld.com/techwatch/archives/008 344.html
http://www.petefreitag.com/item/552.cfm

enjoy

http://gizmoproject.com/

http://www.michaelrobertson.com/archive.php?minute _id=177

http://www.petefreitag.com/item/522.cfm

http://www.randomthink.net/blog/2005/07/08/skype-v s-gizmo-project/

http://voip.about.com/od/voipsoftware/a/gizmoproje ct.htm

I think it is unfriendly to encourage people to use extensions when everyone agrees that extensions often make Firefox unstable.

This is an excerpt from the first link in the above Google search, and it describes my experience exactly: "Firefox has been trying to get me to update to version 1.5.0.1, for a while now so I finally did today. The new version has crashed 3 times already today."