• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Patch your boxes:

Looks like I'm alright since all servers at work are setup to use NLA. Guess I need to schedule time to update our production servers though, just in case.
 
Bad flaw but one that shouldn't be easy to exploit, unlike days of old most people are behind firewalls even at home and this is turned off by default.
 
heatlesssun said:
Bad flaw but one that shouldn't be easy to exploit, unlike days of old most people are behind firewalls even at home and this is turned off by default.
Click to expand...

Until someone gets infected at starbucks/airport/etc and brings their laptop to work/home and it spreads behind the firewall.
 
Patches are automated via "apt-get update && apt-get dist-upgrade"

No reason to ever manually patch anything.
 
tlmiller said:
Patches are automated via "apt-get update && apt-get dist-upgrade"

No reason to ever manually patch anything.
Click to expand...
That's not linux specific, you know. WSUS and GPOs do that for corporations, AND I can provide pretty graphs to boot ( lowers management aggro ).

EDIT: Something of note; in a business environment, you should always have an approval process before patches get distributed to your servers/clients. This applies to OS, application, driver..you name it. That's just being safe and minimizing risk.
 
Last edited:
tlmiller said:
Patches are automated via "apt-get update && apt-get dist-upgrade"

No reason to ever manually patch anything.
Click to expand...

XOR != OR said:
EDIT: Something of note; in a business environment, you should always have an approval process before patches get distributed to your servers/clients. This applies to OS, application, driver..you name it. That's just being safe and minimizing risk.
Click to expand...

Absolutely, totally automated patching in a corporate environment without a testing and approval process would be a complete disaster.
 
You must log in or register to reply here.
Back
Top