jonheal;161938 Wrote: 
> Now, here's where my lack of networking expertise comes into play ... if
> a port is open, but nothing's listening on it, or in this case, only
> SlimServer, is the only way into the network through that port, THROUGH
> Slimserver?

Ports are opened to allow access to the services behind the port.  What
the service actually does with input is entirely up to the service
itself.  If the service is not well designed to prevent various forms
of attack (buffer overflows, etc.), the service can be used as a vector
of attack through unforeseen and unintended ways.

There have been far too many real cases where this happens - in fact,
dozens of new holes are discovered in various pieces of software on a
daily basis.  Furthermore, the exploits to take advantage of these
holes become available almost immediately.  The bot networks are
enormous now from (owned) insecure, openly accessible systems.

Do not become a victim through ignorance - there is simply no reason to
allow worldwide access to unproven services, when simple, effective
security measures are available.


-- 
MrC
------------------------------------------------------------------------
MrC's Profile: http://forums.slimdevices.com/member.php?userid=468
View this thread: http://forums.slimdevices.com/showthread.php?t=30564

_______________________________________________
discuss mailing list
[email protected]
http://lists.slimdevices.com/lists/listinfo/discuss

Reply via email to