Could everyone please post their experiences with different security problems they have had, web site hacks, legal problems, etc. So we all can learn from each other.

Thanks,
-- Coy

Great turnout in a month, I would have liked to read some responses to your question.

Yea I know. Thought there would be alot more then none that would have posted something. Everyone has had their speed bumps and cracks throughout this whole business. Wish someone would share theirs. ;)

We had a customer send us a RedHat 6.1 box with no security patches whatsoever. It got hacked within 12 hours. Fun stuff.

I have a feeling why nobody replied, simply because there are so many exploits out there that it would be IMPOSSIBLE to document them anywhere on a bulletin board (forum) there are web sites dedicated and newsletters dedicated to the topic, a couple are as follows:

http://packetstorm.securify.com
http://safermag.com
http://alldas.de
http://slashdot.org
http://neworder.box.sk
http://theregister.co.uk

ok that should do for now, most of these pages have links sections that you can use to find even more sites

Well, I had one. On my free webhosting server(I put no security on it at all), was hit once by a script kiddy. It turned out it was someone my partner knew(someone a lot younger, 13 I think), we just made up some bs on our laywer contacting him and he just told us what he did. It was a PAM exploit. That was my only experience with an attack. One year, one attack. We are closing it in two weeks, so thats all we gotta last.

This didn't happen to us, yet I found this VERY interesting: http://grc.com/dos/grcdos.htm