Difference between revisions of "Security memo"
From Drafts
(→Spam) |
(→User management in irisnet) |
||
| (5 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
| − | == ' | + | [[Category:Website development]] |
| + | == 'Insecure' protocols == | ||
* FTP, when possible use sftp (available in gftp, fugu and filezilla) | * FTP, when possible use sftp (available in gftp, fugu and filezilla) | ||
| Line 10: | Line 11: | ||
== Spam == | == Spam == | ||
| − | * constant's news is regularily spammed. | + | * <strike>constant's news is regularily spammed. </strike> now migrated to irisnet wordpress. |
* subscription forms for the mailing list. | * subscription forms for the mailing list. | ||
* map of stitch-and-split | * map of stitch-and-split | ||
* <strike>wiki, see recent changes.</strike> Wiki is now only open for writing to people that have a user registered by the admin. | * <strike>wiki, see recent changes.</strike> Wiki is now only open for writing to people that have a user registered by the admin. | ||
| − | == ' | + | == 'Insecure' software == |
* wiki needs upgrade. | * wiki needs upgrade. | ||
| − | * wordpress needs upgrade. | + | * <strike>wordpress needs upgrade </strike> wordpress is autmatically updated and backed up on irisnet. |
* regular updates on server + router. | * regular updates on server + router. | ||
== User management in irisnet == | == User management in irisnet == | ||
| − | * at the moment, the weblogs share the same database | + | * <strike>at the moment, the weblogs share the same database It means if one is cracked all the oters will fall. the same for the wiki.</strike>.blogs do not share db at the exceptions of two. |
| + | |||
| + | * <strike>We need to secure contract with irisnet, too.</strike> Done. Date of expiration? | ||
Latest revision as of 16:16, 18 September 2006
'Insecure' protocols[edit]
- FTP, when possible use sftp (available in gftp, fugu and filezilla)
- SMTP and webmails without https
- in general, open wifi connections
We have to start using gpg keys. How about a key-signing party? How to secure wifi?
Spam[edit]
-
constant's news is regularily spammed.now migrated to irisnet wordpress. - subscription forms for the mailing list.
- map of stitch-and-split
-
wiki, see recent changes.Wiki is now only open for writing to people that have a user registered by the admin.
'Insecure' software[edit]
- wiki needs upgrade.
-
wordpress needs upgradewordpress is autmatically updated and backed up on irisnet. - regular updates on server + router.
User management in irisnet[edit]
-
at the moment, the weblogs share the same database It means if one is cracked all the oters will fall. the same for the wiki..blogs do not share db at the exceptions of two.
-
We need to secure contract with irisnet, too.Done. Date of expiration?
