[Ilugc] Learning on backup systems
tshrinivasan at gmail.com
Fri Dec 25 08:53:58 IST 2015
Those servers were built by few windows admins and they wanted to manage
those servers them self.
All the setup docs, security settings were provided. But on seeing the
applications up and running, they were happy and missed to complete the
security and monitoring stuff.
Found that the root password was kept very simple for easy to remember and
same for all servers affected :-(
We missed to have an audit after the new efforts of windows people setting
the linux servers.
These caused horrible sleepless days/ nights and data loss. Collected most
of the data from users machines and their personal backups. Still
integrating them is another headache.
Realised that security audits and penetration tests can save tons and tons
of efforts and pains.
More information about the ilugc