solidox - Slashdot User

Windows Home Server Details 234

Posted by kdawson on Thursday January 11, 2007 @01:29PM from the just-the-storage-ma'am dept.

phorest writes "Perhaps Microsoft read the comments from the Slashdot community on Windows Home Server? In any event Microsoft is opening up WHS for users to construct their own system after all; though I'd like to see the price of this OS release before making the jump. From the review: "At the 2007 Consumer Electronics Show in Las Vegas this week... Microsoft previewed its long-awaited Windows Home Server product, a Windows Server 2003 R2-based server for consumers that dispenses with the complexities of most Windows Server versions and provides the core storage, sharing, and remote access functionality that digital media and home networking enthusiasts require... Microsoft will make WHS available in two ways: Bundled with new WHS hardware and software-only, the latter so that enthusiasts can install the system on the hardware of their choice... If you're building your own home server, Microsoft requires a 1 GHz processor or better, 512 MB of RAM or more, and as many disks as you think you need. The company will support multiple home servers on the same network, but it's still murky how that will work."

Comment Re:Uh-huh, riiiiiiiiight... (Score 3, Interesting) 386

by solidox on Thursday December 14, 2006 @07:51AM (#17234480) Attached to: PHP Security Expert Resigns

There was an exploit for mambo some time ago, sql injection i believe, perhaps several others also, so mambo is a likely culprit.
One cannot say it was PHP directly that got the machine compromised. It was an exploit in a script written in PHP.
A box isn't going to get compromised if PHP was installed alone on the box without any scripts (at least it's very very unlikely).
Is C the direct cause of your box owned when their is an exploit in say, proftpd for example?

I mean, I could also say...
"yeah, you'd have to be mad to run sendmail on a box you don't want to get owned"
"yeah, you'd have to be mad to run proftpd on a box you don't want to get owned"
"yeah, you'd have to be mad to run bind on a box you don't want to get owned"
"yeah, you'd have to be mad to run a linux kernel on a box you don't want to get owned"

These applications have all had their problems in the past, maybe some still have problems, but overall
they get fixed when new exploits/bugs are discovered.

I'm not quite sure why, but a lot of people/webmasters/admins do not check for updates to the 3rd party php scripts
they have installed, they just install them once and leave them running... Then they wonder why their box was compromised
due to them running out of date software.
You wouldn't leave your windows machine unpatched and never check for updates, would you?

Slashdot Top Deals