| View previous topic :: View next topic |
| Author |
Message |
IOStream
-
Joined: 25 Feb 2005
Posts: 3
|
 Posted: Mon Feb 28, 2005 8:56 pm Post subject: Abyss Security |
 |
|
I was wondering how secure Abyss is.
If I get a domain name, and let google finger my site.. am I going to come back to it a few days later, and its going to have the main page defaced, and everyone that signs on to my forum's information leaked out?
Thats my main concern with this, and I dont see too much in the manual about it. I do see permissions, and giving certain people access to things. But, nothing about security as a whole.
Just looking for some information.
Thank you for your time,
IOStream |
|
| Back to top |
  |
 |
goose
-
Joined: 17 Sep 2002
Posts: 608
Location: The Land Of OZ! come here toto!
|
| Posted: Mon Feb 28, 2005 9:39 pm Post subject: |
|
|
the question is anything in the computing world secure.....? i THINK Not!
I must find a new disguise!
_________________
living in an armish paradise.....no gates here!
mawuahahaha :) |
|
| Back to top |
|
|
aprelium
-
Joined: 22 Mar 2002
Posts: 6800
|
| Posted: Mon Feb 28, 2005 11:50 pm Post subject: Re: Abyss Security |
|
|
IOStream,
Abyss Web Server alone is secure (no known security issues). But Abyss Web Server needs an operating system to run. So if your operating system has flaws, your computer could be attacked. Abyss can do nothing to protect it. That's why it is recommended to have a firewall and a antivirus.
You can also install scripts in Abyss Web Server (a blog, a forum,...). But if the script has a security issue, it can be attacked and can allow a hacker to compromise your system.
Abyss Web Server will do its best to protect you, but it cannot do miracles if other software you use have security problems. You should monitor security reports (subscribing to security mailing list is a good idea: for example http://www.secunia.com ) and whenever a flaw is dicovered in a script or software you use, you should upgrade it ASAP.
_________________
Support Team
Aprelium - http://www.aprelium.com |
|
| Back to top |
 |
|
max_carpenter
-
Joined: 18 Mar 2005
Posts: 124
|
| Posted: Sat Mar 19, 2005 12:38 am Post subject: Same sort of problem but different |
|
|
Hi, I am building a website for a company and at the moment he is hosting it remotely but may change to abyss and this would be useful for my site is we can work out how to encrypt pages. You know when the lil yellow padlock appears at the bottom of the screen with 128 bit encryptions on most shopping sites. How do you get that?
_________________
M.Carpenter
DHCD Computing
max@dhcd.co.uk
www.dhcd.co.uk |
|
| Back to top |
  |
|
TRUSTAbyss
-
Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA
|
| Posted: Sat Mar 19, 2005 1:11 am Post subject: |
|
|
Thats called SSL (Secure Socket Layer) and so what this does is encrypts the
information being sent so that it becomes secure , STunnel can do this , go
to my website and you will find a quick tutorial on installing SSL support.
Sincerely , TRUSTpunk |
|
| Back to top |
|
|
Anonymoose
-
Joined: 09 Sep 2003
Posts: 2192
|
| Posted: Sat Mar 19, 2005 1:13 am Post subject: |
|
|
The 'little padlock' is because the site has purchased an SSL certificate and is running on SSL.
SSL is not supported in the free version of Abyss - it was supposed to be included in the new Pro version, but I don't see it mentioned in the feature list here :
http://www.aprelium.com/abyssws/summary.html
BTW trustpunk, nice to see you gave me credit for writing the STunnel tutorial on here which got STunnel working for you.
http://www.aprelium.com/forum/viewtopic.php?t=4649
Last edited by Anonymoose on Sat Mar 19, 2005 1:18 am; edited 1 time in total |
|
| Back to top |
|
|
max_carpenter
-
Joined: 18 Mar 2005
Posts: 124
|
| Posted: Sat Mar 19, 2005 1:17 am Post subject: thanks but |
|
|
thankyou for your support but you put no link in your reply you prob have a link in your profile but what If I am feeling lazy ay?
_________________
M.Carpenter
DHCD Computing
max@dhcd.co.uk
www.dhcd.co.uk |
|
| Back to top |
|
|
Anonymoose
-
Joined: 09 Sep 2003
Posts: 2192
|
| Posted: Sat Mar 19, 2005 1:18 am Post subject: Re: thanks but |
|
|
| max_carpenter wrote: | | thankyou for your support but you put no link in your reply you prob have a link in your profile but what If I am feeling lazy ay? |
If you are too lazy to click the WWW button below the post, you are never going to get SSL configured. |
|
| Back to top |
|
|
TRUSTAbyss
-
Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA
|
| Posted: Sat Mar 19, 2005 1:18 am Post subject: |
|
|
| My website link is underneath my signature , see the www button ? |
|
| Back to top |
|
|
max_carpenter
-
Joined: 18 Mar 2005
Posts: 124
|
| Posted: Sat Mar 19, 2005 1:22 am Post subject: to hard |
|
|
well at first glimpse it looks to hard but I will try looking again when it is not half past midnite and I am tired, also I know I am being dumb but what is SQL?
_________________
M.Carpenter
DHCD Computing
max@dhcd.co.uk
www.dhcd.co.uk |
|
| Back to top |
|
|
Anonymoose
-
Joined: 09 Sep 2003
Posts: 2192
|
| Posted: Sat Mar 19, 2005 1:23 am Post subject: |
|
|
http://www.google.co.uk/search?q=what+is+sql
| Quote: |
Web definitions for SQL
Structured Query Language - SQL is a standard interactive and programming language for getting information from and updating a database. Although SQL is both an ANSI and an ISO standard, many database products support SQL with proprietary extensions to the standard language.
|
Search engines eh? What will they think of next! |
|
| Back to top |
|
|
max_carpenter
-
Joined: 18 Mar 2005
Posts: 124
|
| Posted: Sat Mar 19, 2005 1:27 am Post subject: |
|
|
lol don't be so smart, its half midnite and I am almost alseep, to lazy to go and do my own research
_________________
M.Carpenter
DHCD Computing
max@dhcd.co.uk
www.dhcd.co.uk |
|
| Back to top |
|
|
|
