News for hackers. Stuff that matters.

A comment on Secure Apache and PHP, hide version numbers. Parent comment

Re:Secure Apache and PHP, hide version numbers by cheald on Friday July 22, 2011 @06:36AM (#2792980)
Obscuring the version number just means that Joe Blackhat has to run through 10 exploits to try to get a hit, rather than just 1. The time difference is likely insignificant.

All this does is produce a false sense of security which may lull system administrations into putting off critical upgrades.

[ Parent | on HN ]
Re:Secure Apache and PHP, hide version numbers by nodata on Friday July 22, 2011 @07:47AM (#2793124)
Joe Blackhat isn't running the exploits - Sam Scriptkiddie is.

> All this does is produce a false sense of security which may lull system administrations into putting off critical upgrades.

Then the sys admin needs replacing.

Creating more work for those that automate system attacks is a good thing.

[ Parent | on HN ]