Started By
Message

re: DNC server didn't have antivirus software

Posted on 1/6/17 at 11:08 pm to
Posted by TuDog
Boston
Member since Jun 2005
4176 posts
Posted on 1/6/17 at 11:08 pm to
quote:

You do know that anti-virus does not prevent all hacks right?


what software prevents it then?
Posted by mmcgrath
Indianapolis
Member since Feb 2010
35512 posts
Posted on 1/6/17 at 11:15 pm to
quote:


what software prevents it then?
Generally the O/S, server software, and restricting traffic to known ports, IP's, etc where possible.

ETA: By "server software" I mean the application that controls the Web service, email service, file service, etc. There isn't some software suite you can buy off the shelf to prevent hacks.
This post was edited on 1/6/17 at 11:19 pm
Posted by LSUTANGERINE
Baton Rouge LA
Member since Sep 2006
36113 posts
Posted on 1/6/17 at 11:15 pm to
quote:

what software prevents it then?

I don't know if any software prevents it completely in this day and age. Server software can me it much more difficult.

I am still waiting on the link that they did not even have antivirus..
This post was edited on 1/6/17 at 11:17 pm
Posted by C
Houston
Member since Dec 2007
27845 posts
Posted on 1/6/17 at 11:18 pm to
There is no way anyone high level should be recieving emails from anyone not on an approved email list. For him to click on a basic phishing email is pathetically amateurish.
Posted by mmcgrath
Indianapolis
Member since Feb 2010
35512 posts
Posted on 1/6/17 at 11:20 pm to
quote:

There is no way anyone high level should be recieving emails from anyone not on an approved email list. For him to click on a basic phishing email is pathetically amateurish.
He was a campaign manager, not some high ranking official.
Posted by Frank Black
the dawn of the new millenium
Member since Mar 2004
5284 posts
Posted on 1/6/17 at 11:21 pm to
quote:

He was a campaign manager, not some high ranking official.
The manager of a NATIONAL PRESIDENTIAL CAMPAIGN IS a high ranking official.
Posted by LSUTANGERINE
Baton Rouge LA
Member since Sep 2006
36113 posts
Posted on 1/6/17 at 11:22 pm to
quote:

There is no way anyone high level should be recieving emails from anyone not on an approved email list. For him to click on a basic phishing email is pathetically amateurish.


did the government report that is what happened? Or is this just something someone else reported and people ran with it? Link, if you know of it?
This post was edited on 1/6/17 at 11:24 pm
Posted by Asgard Device
The Daedalus
Member since Apr 2011
11562 posts
Posted on 1/6/17 at 11:23 pm to
quote:

what software prevents it then?



smart network design
firewall
web app firewalls with introspection
proxies
intrusion detection system
collect and analyze syslogs
security analytics like SIEM
smart GPO policies
applocker
security groups and individual admin accounts with just what they need
microsegmentation
training employees about social engineering
finding and closing exploits in software
nessus
encryption of data at rest and in transit
TLS 1.2
obfuscate as much as you can to avoid brute force

to name a few, all more useful than antivirus on backend servers for preventing hacks.
This post was edited on 1/6/17 at 11:24 pm
Posted by C
Houston
Member since Dec 2007
27845 posts
Posted on 1/6/17 at 11:39 pm to
Yes. It was reported a few weeks back. Podesta was actually suspicious of it but clicked anyways after a colleague supposedly meant to say "don't open it" instead said " do open it".
Posted by Blizzard of Chizz
Member since Apr 2012
19176 posts
Posted on 1/6/17 at 11:51 pm to
Is this really a surprise? I mean what is the average age of dem leadership? It's like mid 70's. Those senile old bastards probably don't even know how to turn a computer on much less what anti virus software is.
Posted by CGSC Lobotomy
Member since Sep 2011
81488 posts
Posted on 1/7/17 at 1:53 am to
quote:

I know this is a political board for getting angry and whatnot but I rarely encounter anyone using antivirus on their Microsoft Exchange servers


That's a poor business practice. Where I work, we use both the Titus tool and have the Exchange Server heavily protected. Any attachment not labeled properly or with a questionable source is immediately zapped by the HIPS.
Posted by CGSC Lobotomy
Member since Sep 2011
81488 posts
Posted on 1/7/17 at 1:54 am to
quote:

applocker


Don't forget BitLocker. While I HATE it, it could have prevented the compromise of the VA data when that one laptop was stolen.
Posted by GRTiger
On a roof eating alligator pie
Member since Dec 2008
63584 posts
Posted on 1/7/17 at 2:21 am to
That nonchalant attitude went away quick, eh? I wasn't disagreeing with you. I was adding context to the alternative methods for detecting malware in email when the exchange server doesn't have av.

Wasn't this supposedly a phising attack and they gave away secret information? AV wouldn't have mattered at any level.

I may be confusing DNC and Podesta.
Posted by cajunangelle
Member since Oct 2012
148190 posts
Posted on 1/7/17 at 3:57 am to
John Harwoods collusion with the democraps and Donna Brasile's line of questions for Crooked Hillary to cheat the debates; locked out Podesta's Norton/AOL anti-virus. They are so inanely stupid that an email from a Nigerian most likely caused all those billions from Obama/Crooked's State Dept to go missing. Because... the Nigerian said he wanted to donate to the great Clinton Slush Foundation.

And Crooked Hillary wanted to actually be POTUS. To: continue the Obama foreign and domestic dumpster fires, and full UN globalism. And to slush our entire country and government to it's knees.

And too boot... the MSM was the shake and bake and they halped. It is astounding!
Posted by Statestreet
Gueydan
Member since Sep 2008
13025 posts
Posted on 1/7/17 at 7:37 am to


"We're not sure how the pigeons got in, sir"
Posted by SquirrelyBama
Member since Nov 2011
6389 posts
Posted on 1/7/17 at 7:45 am to
(no message)
This post was edited on 6/5/20 at 7:40 am
Posted by Loserman
Member since Sep 2007
22039 posts
Posted on 1/7/17 at 7:51 am to
quote:

IT consultant here. I know this is a political board for getting angry and whatnot but I rarely encounter anyone using antivirus on their Microsoft Exchange servers. If they do, Microsoft makes them exempt a lot of directories. Sounds bad to a low level IT professional but it really is common in the industry. The thing is that you wouldnt want your exchange server to be exposed to the DMZ or "normal" parts of our network directly. you proxy al that traffic in through a firewall and use load balancers or NAT. I suspect this is where they fricked up. It's not a computer you use to browse the internet and install random shite on.



Exchange should have One of the integrated products like McAfee Security for Email Servers or Symantec mail security for exchange.

The server itself should still have virus scan and yes you would have to exclude the database files.

Posted by FlatLakeTiger
New Orleans
Member since Nov 2015
2612 posts
Posted on 1/7/17 at 8:35 am to
DNC IT person heard saying "I ain't standing in line to get another flu shot cause I use a computer".
Posted by HubbaBubba
F_uck Joe Biden, TX
Member since Oct 2010
45988 posts
Posted on 1/7/17 at 8:46 am to
This is dumb as shite. My company computer requires two passwords to enter, and they have to be changed every 90 days (which is a royal pain in the arse). Zero access to company files without a VPN. Even my company phone operates on a mobile VPN with persistent connection. Every three days the McAfee software scans the computer and aggressive management by a contracted IT security firm insures the system stays safe. My employer is one of the top ten patent filers in the world every year and they are constantly being attacked.

The DNC not even having antivirus software is nuts.
first pageprev pagePage 2 of 2Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram