From owner-freebsd-security Fri Jul 6 13:59:38 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.jesters-court.net (dsl254-098-227.nyc1.dsl.speakeasy.net [216.254.98.227]) by hub.freebsd.org (Postfix) with SMTP id 8025137B405 for ; Fri, 6 Jul 2001 13:59:36 -0700 (PDT) (envelope-from webmaster@yclan.net) Received: from nazone ([129.21.142.12]) by mail.jesters-court.net (AppleShare IP Mail Server 6.3.1) id 480 via TCP with SMTP; Fri, 06 Jul 2001 17:00:01 -0400 Message-ID: <003801c1065e$c4724480$0c8e1581@yclan.net> From: "Jason Burdick" To: References: <200107061929.MAA30700@user7.hushmail.com> Subject: Re: Hiding Versions Date: Fri, 6 Jul 2001 17:01:03 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hiding version strings is very pointless. The only use is to let admins be a tad bit more lazy in patching so s'kiddies, who only look for version strings for exploit purposes, will pass by the box. This doesn't stop someone with a clue, so it's a waste of time. Patch the box correctly, and you'll have less problems. Besides, Netcraft is cool. It's nice to see that I have the second longest uptime on campus. :) This has been discussed many times before, check the list archives. Jason Burdick System Administrator, Jester's Court Communications To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message