Re:HackedThat: Breaking in to a hardened server via the back...
by spc476 on Thursday August 25, 2016 @08:24PM
(#12363488)
But the weakest point is always human: http://boston.conman.org/2004/09/19.1 (true story---happened to me)
> It’s an example of a utility box that runs various random services - maybe acts as a bastion host or testing ground - and nobody quite manages it or knows what it is used for. This server is as weak as its weakest service; and because it is not purpose-managed, it can be difficult to keep track of what is running on it and ensure all services are patched and secured. If you have one of these servers floating around somewhere, you might want to think twice about keeping it - it may very well be the chink in your armor.
True for applications AND servers.