News for hackers. Stuff that matters.

A comment on Ask HN: advice for my site, happyjobsearch.com. Parent comment

Re:Ask HN: advice for my site, happyjobsearch.com by markbao on Wednesday September 30, 2009 @02:58PM (#853355)
Check le headers.

  Server: Apache/2.2.8 (Ubuntu) Phusion_Passenger/2.0.3
  X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 2.0.3
Ruby on Rails.

(BTW guys, time to upgrade to Passenger 2.2.5!)

[ Parent | on HN ]
Re:Ask HN: advice for my site, happyjobsearch.com by lazyant on Wednesday September 30, 2009 @03:42PM (#853471)
that's leaky and calls for:

ServerSignature Off

ServerTokens Prod

[ Parent | on HN ]
Re:Ask HN: advice for my site, happyjobsearch.com by nonrecursive on Wednesday September 30, 2009 @05:01PM (#853679)
Could you tell me why it's a bad thing? All I can think of is that it gives someone more info so they know where to start when cooking up an exploit
[ Parent | on HN ]
Re:Ask HN: advice for my site, happyjobsearch.com by lincolnq on Wednesday September 30, 2009 @05:09PM (#853700)
If someone is scanning for vulnerable sites, it makes it possible to identify them without attempting the exploit.
[ Parent | on HN ]