|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
17:27 EST/22:27 GMT | News Source:
ActiveWin.com |
Posted By: Robert Stein |
We have just posted 9 screenshots of Windows "Longhorn" Server Build 5308.60 released today to testers. The shots show server manager, windows firewall, configuration tasks, welcome window, etc. Thanks to Digital Five for submitting the shots.
|
|
#1 By
1401 (65.255.137.20)
at
3/1/2006 5:47:32 PM
|
Oh great! Tabbed browsing on my server! Just what I want, 14 web pages open on my server!
|
#2 By
7760 (12.155.143.50)
at
3/1/2006 6:19:19 PM
|
You'd prefer to use IE6 (with all of its security problems) on your server?
|
#3 By
3746 (71.19.43.237)
at
3/1/2006 7:03:05 PM
|
#1
Why wouldn't you? There are plenty of applications that run on a server that use a browser to access. So instead of having a bunch of browsers open you could have one with multiple tabs. If the broswer is going to be there anyways then why not?
|
#4 By
8273 (131.107.0.72)
at
3/1/2006 7:53:46 PM
|
#1: So if I install Opera or FireFox on a server computer - any server (including Solaris or Linux), those browsers will automatically disable tabbed browsing?
|
#5 By
12071 (203.185.215.149)
at
3/1/2006 9:29:00 PM
|
#4 I believe his point is that hopefully no-one in their right mind would ever give you access to install ANY browser on their server. At least no-one in their right mind that actually cares about and understands security and realises that the fewer the components on a server to attack the better/safer. But you go right ahead and install WMP and IE and anything else you like on YOUR server.
|
#6 By
32132 (64.180.219.241)
at
3/1/2006 10:05:10 PM
|
#5 There have been numerous PHP worms that target Linux, without any user intervention.
Smart people would dump PHP and Apache for IIS 6.
No one in their right mind would trust Apache and PHP on their server.
|
#7 By
61 (72.64.155.167)
at
3/1/2006 10:09:03 PM
|
IE on the server is also locked down extremely tight.
|
#8 By
12071 (203.214.147.215)
at
3/2/2006 6:45:29 AM
|
#6 You mean like this (http://www.activewin.com/awin/comments.asp?HeadlineIndex=33658&Group=1) "recent" worm that you brought to our attention on the 20th Feb 2006? You know, the one that was fixed in June 2005, within 24 hours of it being disclosed? Are you still on that pathetic quest?
Smart people run the services that they need (and ensure they are locked down as per best practices and to the best of their knowledge) and disable everything else.
People like you run IE and WMP on every server and as a result your servers are automatically vulnerable and need to be patched against IE and WMP exploits, like these ones:
http://secunia.com/advisories/18835/
http://secunia.com/advisories/18852/
http://secunia.com/advisories/14174/
Note that regardless of the function that your server was performing, you had to apply the patch for those vulnerabilities all because you have no way to remove WMP. You have to love that choice!
#7 You take that on faith from Microsoft, however I'm sure you'll agree that it would be locked down tighter if it wasn't present on there at all. Servers do not need web browsers running on them - anything running on them that is outside the scope of their function poses another potential entry point to be exploited.
|
#9 By
61 (72.64.155.167)
at
3/2/2006 7:51:18 AM
|
So being able to configure a router is not something a server should be able to do?
Just because YOU don't need a browser on the server does not mean other people do not.
|
#10 By
12071 (203.214.147.215)
at
3/2/2006 8:10:52 AM
|
#9 When did I ever say that? I said that they shouldn't be running anything outside of their defined scope. YOU define the scope of your web server, application server, file server, database server, etc. etc. If that scope includes having a browser and WMP and solitaire then so be it, that's your choice. From a security point of view I don't want any of those things on my database server for instance. The problem is that you don't have a chice at the moment to remove them - they come installed by default.
|
#11 By
7754 (216.160.8.41)
at
3/2/2006 10:08:11 AM
|
#10, I get your point--yes, it would be nice to have the choice not to have any browser on the server. I think you will get something like that with the next version of Windows Server if the reports of running it in a CLI-only mode are correct. But to me, this feels like making a mountain out of a molehill. It would seem in reality that simply having the binaries present on the install doesn't constitute those binaries posing a security risk. It is the execution of IE and WMP that opens up the possibility for security vulnerabilities. If someone is somehow able to launch those remotely to attempt to exploit them, I'd think you'd have already lost the machine anyhow. It's similar to IIS security--even after you install it, it is very limited in its functionality. All the binaries for enabling the greater functionality are present, but it isn't until you enable them (and execute them) that they expand the potential attack surface of IIS.
|
#12 By
32132 (142.32.208.231)
at
3/2/2006 12:44:13 PM
|
#8 "Smart people run the services "
Chris, you should realize that IE is not a service and is not exploitable unless you run it and surf to a dangerous location.
Apache and PHP worms attack a running service that is exploitable without user intervention.
Using IE to download patches and go to Microsoft Update isn't very dangerous.
Running Apache 2.x and PHP is very, very dangerous.
|
#13 By
61 (72.64.155.167)
at
3/2/2006 12:46:53 PM
|
Also, so much of the interface (Especially on Small Business Server) is centered around using Trident to render configuration apps.
|
|
|
|
|