Now Up To Date?

Is PriusChat up to date? Hacked twice in rapid succession. The second time it was just a taunt from SuGoS. Are we running Invision Power Board 2.1.7 with all the latest patches?

So immune from the latest kernel vulnerabilities that afflicted the Debian people and backwashed to Sourceforge? How about picked up all the latest sql-injection patches against PHP? Using only ssh to log into the server instead of telnet? Not sharing ssh keys? Shut down all frivolous Linux services?

Quite a number of, maybe easy to me, things to do to lock down a server.

I asked because of the SuGuS incident on 9/1.
[attachmentid=4821]

<div class='quotetop'>QUOTE(Bill Merchant @ Sep 1 2006, 09:04 PM) [snapback]312940[/snapback]</div>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Bill -

Another possible problem that I've seen - - And that is when someone steals your PriusChat idenity & uses it in a very unflattering way?