On 2014-03-02 14:20, Mark Wendt wrote: > In my other recent reply I mentioned my security concerns. These small, > light weight web servers just don't seem to have much security built into > them. Yes, SSL is a good thing, but that only encrypts "that" single data > stream, while not really securing the server itself. Even full-blown web > servers running Apache can be broken into if they aren't configured > correctly, and that previous link that was posted for that small python web > server didn't leave me with a good basis for presuming the web server was > secure, or could easily be made so by the user. > > I'm just not thrilled with the idea of running a web server on a machine > that's controlling a big hunk of heavy, fast moving metal that can do > damage (and lots of it) by someone on the outside with mischief or > malicious intent on their mind. Once somebody's in your network, and if > they've gotten that far there's a decent chance they can get on your > controller machine, who's to say they couldn't wreak havoc with an unsecure > web server which is one of the easiest things to hack into? > > I ain't buying the idea that it's a good thing to introduce into this kind > of environment. For security and safety reasons. > > Mark > Wow! This is the FUD of the year. And mentioning of theUS Navy (some posts above) in this context scratches slightly on a chutzpah... ...sigh!
-- "In der Wissenschaft siegt nie eine neue Theorie, nur ihre Gegner sterben nach und nach" Max Planck ------------------------------------------------------------------------------ Flow-based real-time traffic analytics software. Cisco certified tool. Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer Customize your own dashboards, set traffic alerts and generate reports. Network behavioral analysis & security monitoring. All-in-one tool. http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk _______________________________________________ Emc-users mailing list Emc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/emc-users
