Hack risk

 
Post new topic   Reply to topic    Aprelium Forum Index -> Powered by Abyss
View previous topic :: View next topic  
Author Message
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Wed Jun 07, 2006 8:33 am    Post subject: Hack risk Reply with quote

I set up a daytime server yesterday (closed nights).

However I am concerned posting the link here will make it easy pickings for hackers looking for a specific vulnerability in Abyss.

Have any of you been hacked, defaces og denied servce (DNA)?
Back to top View user's profile Send private message Send e-mail
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Wed Jun 07, 2006 10:02 am    Post subject: Reply with quote

There are no known vulnerabilities in Abyss. If there were they would be fixed quickly. The only other way to "hack" or "deface" your site would be through a badly coded script. If its purely HTML pages then you have no problems.
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Wed Jun 07, 2006 11:32 am    Post subject: My URL Reply with quote

Okay, thanks.

My server is in http://83.92.35.50

I'll get a domain name later. There's a fancy new one: .name, kinky!
Back to top View user's profile Send private message Send e-mail
cmxflash
-


Joined: 11 Dec 2004
Posts: 872

PostPosted: Wed Jun 07, 2006 3:08 pm    Post subject: Reply with quote

I've defaced a lot of websites, all of them because of stupid PHP/ASP/JPS-scrips that dosn't validate incomming data.

Abyss is secure. Just limit access to the console, enable anti-hacking and your server should be pretty secure.


Last edited by cmxflash on Sat Jul 22, 2006 2:36 am; edited 1 time in total
Back to top View user's profile Send private message
Tom Chapman
-


Joined: 09 Jul 2005
Posts: 933
Location: Australia

PostPosted: Mon Jun 12, 2006 12:56 pm    Post subject: Reply with quote

I didn't even have to translate your site to find that it's devoted to Abyss! Your the best man!

I just tried to translate http://83.92.35.50/page1.shtml but I it would no work. :o
Back to top View user's profile Send private message Visit poster's website MSN Messenger
cmxflash
-


Joined: 11 Dec 2004
Posts: 872

PostPosted: Mon Jun 12, 2006 1:19 pm    Post subject: Reply with quote

It's written in Dannish. The page is pretty much just about Abyss and how easy it is to use.
Back to top View user's profile Send private message
Tom Chapman
-


Joined: 09 Jul 2005
Posts: 933
Location: Australia

PostPosted: Mon Jun 12, 2006 1:23 pm    Post subject: Reply with quote

How kool is that! I'm going to link to his page. Hey Thulemanden, do you think you could produce an english copy as well? Most epople who visit my site only speak English and won't know that it's in Danish,

Thanks Tom
Back to top View user's profile Send private message Visit poster's website MSN Messenger
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sat Jul 22, 2006 12:32 am    Post subject: Reply with quote

MrWiseOne wrote:
How kool is that! I'm going to link to his page. Hey Thulemanden, do you think you could produce an english copy as well? Most epople who visit my site only speak English and won't know that it's in Danish,

Thanks Tom


You are really too kind :-)

However my information is so brief and basic that it is not worth the bother for you to act on.

The information is just doubling generic info from other Abyss sites and Aprelium. It's really nothing.

What's your site?
Back to top View user's profile Send private message Send e-mail
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Sat Jul 22, 2006 12:45 am    Post subject: Reply with quote

His site could be anything. He is forever changing it :-)
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sat Jul 22, 2006 12:58 am    Post subject: Reply with quote

Guess I could buy a proper domain for .dk on the server and make it a local center in Danish. I have got open forums on www.ebookmark.dk that can handle forums professionally and securely with backups etc

Well, I ordered a doman name with abyss in it; I'll post it once it has been registered.
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sat Jul 22, 2006 1:02 am    Post subject: Reply with quote

Quote:
Just limit access to the console,


How is this done? Is it simply applying the password in the Console Config?
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
TRUSTAbyss
-


Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA

PostPosted: Sat Jul 22, 2006 1:13 am    Post subject: Reply with quote

No, it simply blocks all IP Addresses except the local ones to the console. Simple! :-)
Back to top View user's profile Send private message Visit poster's website
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sat Jul 22, 2006 12:29 pm    Post subject: Reply with quote

TRUSTAbyss wrote:
No, it simply blocks all IP Addresses except the local ones to the console. Simple! :-)


Good idea; I missed that in PHP-Nuke: instead I renamed the config file to cheat hackers ;-)
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
Tom Chapman
-


Joined: 09 Jul 2005
Posts: 933
Location: Australia

PostPosted: Mon Jul 24, 2006 9:19 am    Post subject: Reply with quote

AbyssUnderground wrote:
His site could be anything. He is forever changing it :-)


Hehe.. I need brainwashing with a good idea... :( :cry:
Back to top View user's profile Send private message Visit poster's website MSN Messenger
pkSML
-


Joined: 29 May 2006
Posts: 952
Location: Michigan, USA

PostPosted: Mon Jul 24, 2006 10:48 pm    Post subject: Reply with quote

Hey Tom (mrwiseone),

I've visited your site quite a lot and see you have had some really neat designs.

Instead of scrapping them all and starting over, I have a suggestion or two.

1. Maybe your site could allow a person to select which theme they want to view your site in. Just keep the content separate from the theme and let PHP compile all the HTML.

2. For content, you could offer different themes for download that you've collected, whether original with you or found somewhere on the net. I personally would like to build a collection of different themes.
_________________
Stephen
Need a LitlURL?


http://CodeBin.yi.org
Back to top View user's profile Send private message Visit poster's website
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Mon Jul 24, 2006 10:56 pm    Post subject: Reply with quote

Actually pkSML, you may have an idea there.

Instead of making templates for his site, why doesn't he compile them for other people to download and use on their site? I think that would be a nice thing for the Abyss community to have :-)
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
Tom Chapman
-


Joined: 09 Jul 2005
Posts: 933
Location: Australia

PostPosted: Tue Jul 25, 2006 7:20 am    Post subject: Reply with quote

At last my guardian angels have spoken lol

Thanks for the idea I see no reason why not! Expect some neat things in the future or um or never mind scrap that last line.. :(
Back to top View user's profile Send private message Visit poster's website MSN Messenger
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Wed Jul 26, 2006 1:10 am    Post subject: danish-abyss.info Reply with quote

Thulemanden wrote:


Well, I ordered a domain name with abyss in it; I'll post it once it has been registered.


The coming name for my Abyss site will be danish-abyss.info

It will probably work from 1 Aug. 2006

In te mean time use http://83.92.35.50
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sat Jul 29, 2006 5:45 am    Post subject: Reply with quote

In the mean time I got som hardware problems and had to flush my MS XP with Abyss on it. :cry:

This means my web server now is Monkey HTTP Daemon on Damn Small Linux, as it comes embedded and ready with that distro. Also had to use some old versions of the content file.

However I still advocate Abyss for Windows users, :) although I presently dare not exchange Monkey for Abyss given the hours spent on recovering from what started out as shift of a cabinet. :cry:

If anyone has a design for exchanging one server tool for another, e.g. Mnkey for Abyss on Linux, please advise.

I know the router is set to point to the PC holding the server, but how does it know how to direct traffic down to the web folder. Is it the server tool Abyss/Monkey that collects it from the router rather than passively receive it?

Can I simply close the Monkey Server and install and start Abyss with no problems?

Thank you.
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Sat Jul 29, 2006 2:47 pm    Post subject: Reply with quote

Thulemanden wrote:
Can I simply close the Monkey Server and install and start Abyss with no problems?


Of course you can. Web servers that come with Linux distributions are not mandatory to the OS. They are just software you can disable or uninstall and replace.
_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
Thulemanden
-


Joined: 30 May 2006
Posts: 64
Location: Copenhagen, Denmark

PostPosted: Sun Jul 30, 2006 12:40 pm    Post subject: Reply with quote

aprelium wrote:
Thulemanden wrote:
Can I simply close the Monkey Server and install and start Abyss with no problems?


Of course you can. Web servers that come with Linux distributions are not mandatory to the OS. They are just software you can disable or uninstall and replace.


Thanks; I'll do this exercise later, when my frustrations are less and energy and optimism better. :-)
_________________
Reformers are doomed to fail - http://83.92.35.50
Back to top View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic   Reply to topic    Aprelium Forum Index -> Powered by Abyss All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB phpBB Group