Six things security pros keep getting wrong

www.infoworld.com/t/security/6-things-security-pros-keep-getting-wrong-242786 (2 pages) or www.infoworld.com/print/242786 (1 page) from www.linuxsecurity.com/content/view/161592

Ah man!!

 

ive found interesting things on web servers before, like alternate versions of images and logos, alternate layouts and shit. this isn't abuse because they left access to this open. it's not my fault i made a typo and ended up there

lots of webservers also run email servers which you can tell by scanning ports and finding port 25 and port 110 open, some of them don't require any credentials either to send whatever email you want, with whatever originating email address you want to so someone could send an email and have it look like it came from a financial institution or something by telnetting the server or send mass spam by writing a simple script.