Longhorn Server's "Improved" Security
An anonymous reader writes, "The 'most secure Windows ever' may be very secure from hackers and malware — but what do you do when Longhorn Server lets you install the OS, set up Active Directory, and initialize the domain without once asking you even to create an administrator password? From the article: 'What happened to Windows Server? Where did all of the stringent security checks and ultra-protection of Windows Server 2003 go? Windows Server 2000 was quite insecure, and Windows Server 2003 turned over a new leaf... But it seems Microsoft is more than willing to flip that page back — even Windows Server 2000 required an Administrator password at the very least.'" Inevitably, Dave Barry's years-old quote comes to mind: "Microsoft has a new version out, Windows XP, which according to everybody is the 'most reliable Windows ever.' To me, this is like saying that asparagus is 'the most articulate vegetable ever.'"
I am trying to set up a secure FTP server under Linux and have been told to use WU-FTPD (I am not a Unix guy, but have a lot of experience with Windows 2000 AD so I think I'm ready and I don't trust IIS6 to handle this properly). My server has 2.5 TB of space for the ftp root, but I'm having some trouble setting up the right kind of access. When I FTP in as root I can get to everything on the system, but I'm not going to be giving out the root password to people because that's supposed to be insecure. When I FTP in anonymously, I get thrown into this weird directory that doesn't exist on my system. If I try to cd to /, all I see is a folder called bin. But my / on the system has a whole bunch of folders in it. So my requirements are this:
/mnt/data with full read/write access. This is going to be a public FTP server with no usernames and passwords or anything so that it's easy to use. It should still be secure because it's runing WU-FTPD, so I don't think user accounts really matter. It's on a T3 so the bandwidth shouldn't be an issue since it will only be used by people who work for my company and there's only ten of us who will actually use it. The main reason for using WU-FTPD is because we'll need complete from the ground up security since the system will be storing sensitive data (mostly financial records for the company with various account numbers and IDs). A friend of mine on the WINNT-LIST (Peach.ease.com) said that Slashdot has a lot of people knowledgable in Linux Unix and it might be a good place to post. If this is the wrong place in the forum to post, let me know. Also let me know if I should get an account to gain access to the hacker forums. Many thanks.
1. Allow anyone in from any IP on the net
2. All users log in anonymously
3. They gain full read/write access to the 2.5 TB space on the system
So I have to set the anonymous user (?) home directory to
become obseesed bunch of gay negros stupid. To the