[thelist] CF Freebie

[Seth Bienek]

HI Frank,

For ColdFusion, see http://allaire.com/security, and you can sign up for the
free notification service (which rules) at:
http://www.allaire.com/developer/securityzone/NotificationService.cfm

For Microsoft IIS, check out:
http://microsoft.com/technet/security/web.asp
which includes some handy utilities you can use to help secure your IIS
installation, etc.

Also, I would check out ANY OS/Software you are using or are thinking about
using here:
http://astalavista.box.sk/
Astalavista is a search engine for security-related info.  Note that though
the organization professes to be completely "white hat", or legit, there may
be some links to sites hosted by hackers, skript kiddiez, or other "black
hat" elements, so reasonable caution should be excersized, though ultimately
there's nothing like finding out the latest exploits straight from the
horse's mouth.

There are a number of other security sites out there, notably
http://l0pht.com, and most software used on the Internet will have some
place on the ol' company website specifically dedicated to "security
issues".

Hope this helps,


Seth

------------------------------
Seth Bienek
Solutions Development Manager
Stonebridge Technologies, Inc.
972.455.7294 tel
972.404.9754 fax
------------------------------


> Is there are central repository of this sort of thing, with the
> known fixes?
> --