In a twisted moment I wondered to myself, how long would a server last if it were just set up with the basics, just an OS and a live network connection, and the root password was published somewhere, like say this forum??

Would people be wary, or just dive in and set up a couple of quick DDoS attacks before mum calls that dinners ready....

:nuts:

:erm: 3 .. maybe 4


err... minutes that is:bomb:

Originally posted by mlovick
:erm: 3 .. maybe 4


err... minutes that is:bomb:

That Long? hmm :)

I think that publishing the root password would make most people suspicious, but who knows. I can't say what goes on inside the minds of people who crack systems. I'd think that it might be cracked faster if you posted something like:

"I just got a new server and installed Redhat 6.2 on it. I'm using it to host <whatever>.com and I'm looking for tips on securing it. I haven't installed any patches yet. Is there a web page somewhere with security updates or something?"

hmm, you certainly have some interesting points, i might just take you up on this, when i get my second machine hardware setup ill install basic linux mandrake and connect it to a cable line, then post the username/password and IP on 3 forums and wait for the response. lol

to be continued...

There was a pretty good one a few months back. A guy was done with a RAQ3 and the hosting company wouldn't let him out of the contract for 30 more days. So he took all of his clients off cleaned it up and then issued a challenge. He gave out a guest username/password and challenged anyone to crack it open. It was pretty amusing...

I don't know the exact amount of time...but it was several days before anyone broke it open.

Don't give out the root password...that is too easy. Give out a user account and see if anyone can get into trouble...

Hey, there you go, just post a demo account or something, count to 20 and I'll send you a hello. Okay?