I am not only a programmer, but also somewhat of a security guy and a former hacker (with a
limited but useful experience). That's why I have used a few security measures to prevent this
site from being hacked.
- Use of ipchains/iptables. This site only allows incoming connections to certain,
well secured ports. The philosophy is to grant access only on the need to use basis.
-
The user data that is passed to programs is well sanitized. All potentially damaging
characters and chaacter combinations are removed before allowing programs to use
the data.
-
I do regular, multiple, redundant backups of this site. If someone breaks in, all
they will be able to do is steal the source code, which I
think will be relatively useless, and deface my site briefly. In no event I will
lose any valuable data.
-
I use various undisclosed logging and authentication tools. All attempts
to hack this site will be reported to your mom, your ISP, and even the
FBI
and vigorously prosecuted. You have been warned!
-
There is nothing on this site that is of value to any serious hacker.
In particular there are no credit card numbers or unencrypted passwords
or SSH keys that allow automatic logins.
|
