• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: WebObjects App Open To Hackers - So I'm Told
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: WebObjects App Open To Hackers - So I'm Told


  • Subject: Re: WebObjects App Open To Hackers - So I'm Told
  • From: "Jonathan Fleming" <email@hidden>
  • Date: Mon, 07 Jul 2003 10:14:13 +0100

From: Dario Bagatto <email@hidden>
To: email@hidden, email@hidden, email@hidden
Subject: Re: WebObjects App Open To Hackers - So I'm Told
Date: Fri, 4 Jul 2003 19:22:00 +0200


Hi,

OK guys I hear what you are all saying so i'm going to give you the address in question live:

 http://217.65.164.40/cgi-bin/WebObjects.dll/JandM.woa/1/wa/Terms

Is this address a sucrity issue?

The only thing I found so far is that you have port 56789 open on which you have a running JavaMonitor.


It's good that you have set a password on JavaMonitor but anyhow if someone can hack your password he has access to JavaMonitor and could shut down your application for instance. And as far as I know the password you enter is transferred in clear text over http.

Thanks Dario,
If this is so, is there any way that I can encrypt the password on Monitor like I have done on all my other apps for login access as I have to have the monitor running constantly for the next few months when I'll be able to use a VPN set up.


Jonathan :^)

I would close Port 56789 on the firewall.

Won't this stop me accessing Monitor from a web browser since I need to for now?


Dario
--
_______________________________________________
webobjects-dev mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/webobjects-dev
Do not post admin requests to the list. They will be ignored.

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger
_______________________________________________
webobjects-dev mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/webobjects-dev
Do not post admin requests to the list. They will be ignored.

  • Prev by Date: Re: Eclipse & WebObjects
  • Next by Date: Re: EOModeler error with MySQL - SOLVED
  • Previous by thread: Re: WebObjects App Open To Hackers - So I'm Told
  • Next by thread: Re: WebObjects App Open To Hackers - So I'm Told
  • Index(es):
    • Date
    • Thread