WordPress.com

Filed under: Uncategorized — 2005-10-15 @ 05:07:46

I got a WordPress.com invite a few days ago and finally tonight setup my WordPress.com blog. Figured if it was good enought for Scoble.
Speaking of Scoble I would like to mention my experience with a certian windows machine at work. This machine was destined to be the only windows machine on our network. I setup windows 2003, installed VNC, verified that I could connect and went home. If your not familar with what's going on here in the northeast, you should know it's been raining. Raining HARD, for about a week and more now. To make a long, long story short. I got stuck because of the rain and it took me way longer than it should have to get home. So, in any event, I deferred the setup of this machine until the next day.
The next day, the machine would not respond to VNC.
After a few minutes of trying from other machines I decided it required help, a quick email to our remote hands service asking them to "please check the status of the VNC server" garnered the following response as to why it was not responding.

This is because the box is owned beyond recognition. I cant open anything it is so owned.

Basically less than 24 hours after the machine was setup it was completely and thoroughly owned. We ended up having to pull the network cable on it a few minutes later after spam abuse complaints started rolling in. I have literally left unpatched default installs of FreeBSD on the network for weeks before needing to set them up for a customer and doing the CVSUp dance without a single issue.
So, Mr Microsoft Dude tell me why it's so difficult to ship a secured system? Tell me why you can't do what every open source distro does. Disable all services until such time as they are needed and until such time as they have been patched.

Oh, I have a single WordPress.com invite. If you want it, add a comment to this post that includes a link to your blog.

No Comments »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a comment

Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>

(required)

(required)