Thread: OS security

    #1
  1. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Oct 2002
    Posts
    61
    Rep Power
    12

    OS security


    Hi,

    I have a few things that I need to know, thus, I hope anyone smart out there could answer some of these questions.

    I am wondering if it's possible for a client web-browser to query the server, so that it knows what OS the server is running and what applications it uses to host its website (e.g. php, java, apache, etc)?

    If it's possible, isn't it a big security issue?


    Ali
  2. #2
  3. Second highest poster :p
    Devshed Supreme Being (6500+ posts)

    Join Date
    Jul 2001
    Posts
    7,322
    Rep Power
    33
    Well it is possible, and you can disable it if you wish, security by obscurity. Apache has an option in the config so all it reports is Apache and doesnt reveal any modules or versions. I really don't see how its that much of an issue if everything is kept upto date with security patches and the like. Netcraft have a section on their site where you can find out what OS a server is running - http://uptime.netcraft.com
    - Andreas Koepke

    Koepke Photography

  4. #3
  5. No Profile Picture
    Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2003
    Location
    Yerevan, Armenia
    Posts
    224
    Rep Power
    12
    Generally most network daemons identify themselves by default. Also telnet sometimes (as far as i know) gives out the os. Generally it's not a security issue, more over many servers post such info on their web sites.

IMN logo majestic logo threadwatch logo seochat tools logo