On Fri, 2009-11-13 at 17:26 +0000, haman...@t-online.de wrote:

I've only used Red Hat flavours of Linux since RH 6.2 so I can't speak
for other distros, but here's my experience.

> Where IPs looked like machines in a computer center, I occasionally
> had a closer look and found newly created sites, machines perhaps not
> intended to run a plain webserver at all, and sites inviting to log
> into plesk / confixx / whatever
>
Up to the early Fedoras it was well known that a fresh install didn't
have a default firewall configured, so only a fool would do an install
and configure the network with an active LAN connection unless he was
behind a perimeter firewall or a NAT router.

> One admin admitted that they were hacked through login guest / pass
> guest
> 
That could not have happened with any RedHat distro I've used for two
good reasons: (1) the installer does not create a guest login and (2)
root does not have a default password.

However, I have seen Unices and workalikes, such as Vos, that did set up
a standard set of user accounts with shells and a default password that
was used for all of them including root.

Martin


Reply via email to