[Cialug] Open source for Crystal Report???

Jon Clemons cialug@cialug.org
Fri, 22 Apr 2005 17:32:45 -0500


 Nathan is correct. There are hundreds of thousands of websites
that run on IIS and never get hacked. The key would be to find
out how they hacked your system and was there something
which could have been done and wasn't done to prevent it
from happening. I usually start by finding out which ports
on the machine we exposed to the Internet. If it was anything
other than IIS ports then you need to think about securing
your systems differently rather than switching platforms.



----- Original Message ----- 
From: "Nathan C. Smith" <smith@ipmvs.com>
To: <cialug@cialug.org>
Sent: Friday, April 22, 2005 1:34 PM
Subject: RE: [Cialug] Open source for Crystal Report???


> Are you looking for easy report writing, or just scheduled or slick
> web-based reports once the reports are written?
>
> I'm not familiar with any report-writing tools.  PHP can out put reports 
> in
> many formats including PDF and via SMTP.  Perhaps you could clarify what 
> you
> are looking for a bit more?
>
> Is the individual that wants to change platforms skilled with Linux and
> Apache?
>
> If I put on my psuedo-security expert hat for a minute, I would say,
> switching platforms isn't necessarily the best insurance you have against
> getting hacked.  Setting up your servers to be secure to the level of risk
> you can manage and accept is all any of us can do.  I really like Open
> Source like Linux BSD and Apache, but if you don't have the talent 
> in-house
> to secure a system to a level of risk you are comfortable with, changing
> platforms is like rearranging deck chairs on the titanic.  Some opinions
> will differ, but Apache, as it ships with many distributions is actually
> less secure and harder to manage (lots of pre-installed modules) than IIS.
>
> In any case, it will boil down to a few things: The level of risk you are
> able to accept.  The level of risk you can budget, and the skills of the
> individuals handling the network, server systems, and web programming.
>
> My opinions, I hope others have a take on this too.
>
> -Nate
>
>
>
> -----Original Message-----
> From: Elizabeth Murray [mailto:Elizabeth.Murray@dnr.state.ia.us]
> Sent: Friday, April 22, 2005 1:17 PM
> To: cialug@cialug.org
> Subject: [Cialug] Open source for Crystal Report???
>
>
> HI.  New to the group and new to Linux.
>
> Do you know if there is an open source or Linux substitute for Chrystal
> Report?
>
> One of the guys on my web team is wanting to replace all of our MS IIS 
> sites
> with Linux.  We got hacked last week.
>
> Any ideas would be appreciated.
>
> Liz M
>
> V. Elizabeth Murray, CNE5, CNE6, MCP
> Information Technology Specialist V
> Air Quality Bureau
> Iowa Department of Natural Resources
> 515-281-8565
> elizabeth.murray@dnr.state.ia.us
> _______________________________________________
> Cialug mailing list
> Cialug@cialug.org
> http://cialug.org/mailman/listinfo/cialug
>