This post is sure to ruffle some feathers…

Because I’ve been in the “not putting up with any BS” mood all weekend, I present to you some critiques of things you commonly see online:

As more information came in about the blogger hack, it is amazing how many people who immediately kicked in with their own “expert” opinions about what happened were so absolutely wrong. First it was “the blogger programming is obviously insecure”, then it was, “well that’s what they get for using IIS and SQL Server”, when in fact the hack was through an unpatched server running Red Hat Linux. Yes, it appears that even Linux has to be patched to remain secure, imagine that.

The second thing that seemed to be popular was “well I use Movable Type, so I don’t have to worry about security problems like this.”, no not really. If you’re running MT on a Red Hat server, you still have to have the same vulnerability patched, since it was a server vulnerability, not a blogging software vulnerability. Secondly, take a look at Phil’s post about spammers using a script to comment to every one of your MT posts. Sounds like an issue to me, although it obviously isn’t limited to MT.

My point is not to trash MT and Red Hat, but it is to point out to those of you who have an “expert” opinion about every security hole out there, that security is a problem for every OS, every software package, and every PC on the internet, not just the one’s you happen to not like. Those are both examples of fine software, but software that still requires you to pay attention to security issues! I am so tired of hearing from supposed experts that because of the software they use, they don’t have to worry about security holes. Anyone who would say such a thing is obviously not an expert, and it’s an opinion you should pay absolutely no heed to at all! Blogger got hacked because they missed a security issue and failed to patch one of their servers. They messed up and got caught, just like hundreds of other websites have. If you think it’s so easy and that you would never get caught like that, maybe you should open up your own hosting company and prove it instead of bitching from the sidelines.

We don’t host websites at my job, but there have certainly been issues that I missed, or made the wrong call on. It happens. You fix it, admit you screwed up and move on with your life.

Similar Posts

  • |

    Linked: The Future of Remote Work is the Opposite of Lonely

    Unfortunately, there are a lot of people out there scaring people into thinking that if they don’t get back to the office, they’ll have a very lonely life with no friends. After all, most adults make most of their friends in the workplace nowadays. I know I’ve made plenty myself. But, part of that is because we spend so much time in the office, and nowhere else, that we struggle to maintain any relationships outside of work.

    Who has time? Between our 9-10 work day, another hour commuting, and all the extra work we do at night and on weekends, what time are we going to spend with other people?

    It doesn’t have to be that way though. Many of us can get our work done from elsewhere, and spend more time in a location that is more conducive to keeping in touch with our friends. That’s the ultimate promise of remote work, and something that employees, and employers, should be considering when we think about what our office policies are going to look like.

  • Office User Survey

    Interesting survey fromGR Business Process Solutions about the various features in the main Office apps and how people use them, or don’t use them. My personal experience would suggest that their numbers are high, but then again, my experience is in a not for profit environment where you typically get employees with less computer skills…

  • Buy it here!

    Yeah I finally gave in and created a Cafepress store, so now you can actually buy the logo on a tshirt or coffee mug, or a few other things. There’s the logo above, and there’s another GIF that has some various statements I actually hear in the course of doing my job. (The shirts come…

  • Think I’m paranoid?

    You may think that last post sounded a bit paranoid, but ask yourself this. Assuming that this information was pulled from a press release, someone who wrote that press release decided to throw usenet and IRC out there as havens for illegal file swappers. Someone with enough knowledge of the internet to go there and…

  • Life in IT

    Some days you’re sitting here and everything’s working well, no one really is hitting you up with requests and you’re almost, dare I say it, a little bored. Other days, well, many things don’t work and everyone needs something from you now, and you just don’t see how you can possibly get to everything. Needless…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)