All persistent images, nothing gets changed. Every evening when they close, the systems undo anything automatically. I now help a library part time and we have DeepFreeze on all their public systems. Most shops aren’t a bunch of n00bs with Adaware and spybot. With all the machines on the benches being automated for repair for the most part these days, what do you think we do all day? Right, we surf the web, read up on things, and tinker with our own systems. It’s also not good form to walk into a repair shop and tell them they should try something.
gouging.Ĭustomers are fickle and not loyal for the most part, and you have to find the happy medium. You have to find the right balance in your area of too fast vs. It gets done, usually fairly well, and it sucks up enough time that we made our money without having the customer think it was so simple.Īnd before you tear into that, usually if a job was done too fast, clients would think we were lying to them about the repair being needed and not want to pay. I generally pull the HD, slap it on another win-system and disinfect from there, so that their filesystem isn’t “live”. The reason we look at you like that is that most of us charge hourly. We used linux and other OSes in the backed. The Microsoft school of security is “reactive” and involves patch patch patch.ĭon’t be blindly faithful against things you don’t really know about and you think google will teach you. This is called proactive security my friend and it is designed to never give hackers a chance. It is easy to tamper with files, it is extremely difficult to tamper with the rpm database. (XP SP2 shipped a similar feature to the NX part but not as featurefull as exec-shield).Ģ.) Packages compiled with a hardened compiler using something called FORTIFY_SOURCE to also prevent buffer overflows.ģ.) Extra checks in the C libraries to prevent buffer overflows *yet again*.Ĥ.) SELinux Mandatory Access Control preventing compromised system daemons from doing much harm whatsoever.Ħ.) Checksums of every single file installed with rpm can be verified by doing ‘rpm -V packagename’. Security Features in newer redhat distros:ġ.) Exec-shield kernel module to help prevent buffer overflows and utilizing the NX (No Execute) instruction on newer CPUs. hmmmmm, I don’t think it would be so easy. Now lets see you try that on a modern redhat version like say RHEL4 or Fedora Core 5….
0 kommentar(er)
