Language Selection

English French German Italian Portuguese Spanish

Hiding Software Versions - A Step Forward to a Secure Server

Filed under
HowTos

Hiding Software Versions - A Step Forward to a Secure Server
By drendeah

Most of you may not notice, or may not care, about the software versions that get revealed by the running services on your server. By default almost all services reveal some information to the clients that use them. Among this information is the version of the software that is being run. It has always been best practice, not to reveal more than it is needed. Why reveal the version of the service when nobody needs to know it? By letting these details be seen, you don't get anything else, but an extra chance for crackers to break into your server.

Let's suppose that you have an old software running, and it's configured to show it's version. For a cracker who scans the internet periodically it will be very easy to hack into your server if he already has some knowledge about your server. You will help him narrow his attempts only to those related to your software version.

So, by hiding the software version you make life harder for hackers/crackers. Of course you should, at all times, keep your system up to date, but in case you forget or something happens and you are unable to do so, why not take extra care and give as little information as possible to the outside world.

I will now show you how to change this default behavior for some popular software on Ubuntu 8.04.1 Server.

Read the full article at:
http://www.linuxsecurityforum.org/f5/hiding-software-versions-a-step-forward-to-a-t179.html

More in Tux Machines

Mozilla Wants to Save the Open Web, but is it Too Late?

Again, I think this is absolutely correct. But what it fails to recognise is that one of the key ways of making the Web medium "less free and open" is the use of legally-protected DRM. DRM is the very antithesis of openness and of sharing. And yet, sadly, as I reported back in May, Mozilla has decided to back adding DRM to the Web, starting first with video (but it won't end there...) This means Mozilla's Firefox is itself is a vector of attack against openness and sharing, and undermines its own lofty goals in the Open Web Fellows programme. Read more

Open source is starting to make a dent in proprietary software fortunes

Open source has promised to unseat proprietary competitors for decades, but the cloud may make the threat real. Read more

Chakra-2014.09-Euler released

The Chakra team is happy to announce the first release of the Chakra Euler series, which will follow the 4.14 KDE releases. A noticeable change in this release is the major face-lift of Kapudan, which now gives the option to users to enable the [extra] repository during first boot so they can easily install the most popular GTK-based applications. Kudos to george2 for the development and Malcer for the artwork. Read more

What Linux User Groups Can Do for FOSS

On a monthly basis — on the last Saturday each month — members of the Felton Linux Users Group drag their collective butts out of bed at the crack of 9:30, or possibly earlier, and make their way from various points in the sleepy little town just northeast of Santa Cruz to the solar-powered Felton Fire Station for their meeting. It’s a good group with core regulars hosting meetings since the Lindependence Project held three open houses to introduce the town to Linux in the summer of 2008. In those open houses, various distros like Debian, Fedora, Ubuntu and Mandriva, along with hardware maker ZaReason, and even an open-source stuffed penguin maker called Open Animals based in Phoenix, appeared to show their wares to the curious in the San Lorenzo Valley area. Around 600 people appeared over the three days and more than 300 live CDs went out the door. Read more