Trump's Cyber Security Advisor Rudy Giuliani Runs Ancient, Utterly Hackable Website (theregister.co.uk)

mask.of.sanity writes from a report via The Register: U.S. president-elect Donald Trump's freshly minted cyber tsar Rudy Giuliani runs a website so insecure that its content management system is five years out of date, unpatched and is utterly hackable. Giulianisecurity.com, the website for Giuliani's eponymous infosec consultancy firm, runs Joomla! version 3.0, released in 2012, and since found to carry 15 separate vulnerabilities. More bugs and poor secure controls abound. The Register report adds: "Some of those bugs can be potentially exploited by miscreants using basic SQL injection techniques to compromise the server. This seemingly insecure system also has a surprising number of network ports open -- from MySQL and anonymous LDAP to a very out-of-date OpenSSH 4.7 that was released in 2007. It also runs a rather old version of FreeBSD. 'You can probably break into Giuliani's server,' said Robert Graham of Errata Security. 'I know this because other FreeBSD servers in the same data center have already been broken into, tagged by hackers, or are now serving viruses. 'But that doesn't matter. There's nothing on Giuliani's server worth hacking.'"

Comments

Re:Not really a big deal.

[gmack]

He is completely wrong. It does matter. How can Rudy Giuliani be the cyber security czar if he doesn't even know enough to contract competent people to keep his website secure?

Is this supposed to be suprising?

[SeaFox]

It seems most of Trump's appointments have been for people who are the opposite of the best choice for the job.

Re:Let's call it what it is...

[tempo36]

Your clear reasoning and logic cuts me to the bone. In the face of your biting rhetoric my resolve and courage crumble to dust.

Re:Random aspersions

[Actually, I do RTFA]

NYC was better off off after Giuliani because all of America improved during that time. Compared to the rest of America, NYC actually lost ground.

Part of that was due to wasteful, counterproductive and possibly unconstitutional policing policies (broken window policing, stop and frisk). Part of that was due to setting up charter schools that actually underperformed the public schools. Part of that was due to botching the ability to respond to 9/11 by failing to properly prepare (e.g. putting the emergency command and control building in the WTC against all advice). And part of that was giving jobs to corrupt associates as opposed to qualified bureaucrats.