Difference between revisions of "Security memo"
From Drafts
(→Spam) |
|||
| Line 13: | Line 13: | ||
* subscription forms for the mailing list. | * subscription forms for the mailing list. | ||
* map of stitch-and-split | * map of stitch-and-split | ||
| − | * wiki, see recent changes. | + | * <strike>wiki, see recent changes.</strike> Wiki is now only open for writing to people that have a user registered by the admin. |
== 'Unsecure' software == | == 'Unsecure' software == | ||
Revision as of 09:31, 3 May 2006
'Unsecure' protocols
- FTP, when possible use sftp (available in gftp, fugu and filezilla)
- SMTP and webmails without https
- in general, open wifi connections
We have to start using gpg keys. How about a key-signing party? How to secure wifi?
Spam
- constant's news is regularily spammed.
- subscription forms for the mailing list.
- map of stitch-and-split
-
wiki, see recent changes.Wiki is now only open for writing to people that have a user registered by the admin.
'Unsecure' software
- wiki needs upgrade.
- wordpress needs upgrade.
- regular updates on server + router.
User management in irisnet
- at the moment, the weblogs share the same database. It means if one is cracked all the oters will fall. the same for the wiki. We need to create user accounts for irisnet, it will involve changes in urls, etc. We need to secure contract with irisnet, too.
