From info at jsfmp.com Thu May 5 11:58:57 2016 From: info at jsfmp.com (Joel Shapiro) Date: Thu May 5 11:59:03 2016 Subject: [FX.php List] [ANN] CWP User Group - Monday at DevCon 2016 Message-ID: <6C11DD80-24C3-48CE-9474-CA0E838F83EB@jsfmp.com> Hi all We're going to be having our 10th annual(!) CWP User Group on Monday, July 18, 3:30-5:30pm (just before the 6pm opening keynote). Got something you'd like to share? Please let me know. Everyone's welcome. Come join us! -Joel http://jsfmp.com/cwp-user-group ~~~~~~~~~~~~~~~~~~~~~ Joel Shapiro FileMaker Pro : database design : web development http://jsfmp.com 415-269-5055 ~~~~~~~~~~~~~~~~~~~~~ From chris at iViking.org Thu May 5 19:15:42 2016 From: chris at iViking.org (Chris Hansen) Date: Thu May 5 19:15:43 2016 Subject: [FX.php List] [ANN] CWP User Group - Monday at DevCon 2016 In-Reply-To: <6C11DD80-24C3-48CE-9474-CA0E838F83EB@jsfmp.com> References: <6C11DD80-24C3-48CE-9474-CA0E838F83EB@jsfmp.com> Message-ID: Thanks, Joel! --Chris > On May 5, 2016, at 11:58 AM, Joel Shapiro wrote: > > Hi all > > We're going to be having our 10th annual(!) CWP User Group on Monday, July 18, 3:30-5:30pm (just before the 6pm opening keynote). > > Got something you'd like to share? Please let me know. > > Everyone's welcome. Come join us! > > -Joel > > http://jsfmp.com/cwp-user-group > ~~~~~~~~~~~~~~~~~~~~~ > Joel Shapiro > FileMaker Pro > : database design > : web development > http://jsfmp.com > 415-269-5055 > ~~~~~~~~~~~~~~~~~~~~~ > > > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list > From info at jsfmp.com Mon May 16 14:29:29 2016 From: info at jsfmp.com (Joel Shapiro) Date: Mon May 16 14:29:34 2016 Subject: [FX.php List] [ANN] CWP User Group - Monday at DevCon 2016 In-Reply-To: <6C11DD80-24C3-48CE-9474-CA0E838F83EB@jsfmp.com> References: <6C11DD80-24C3-48CE-9474-CA0E838F83EB@jsfmp.com> Message-ID: <9F685467-B8F1-44D3-8664-461A1066A2BF@jsfmp.com> Hi again Anybody here up for showing something to the group at DevCon? We?ve got open spots still, so I?m askin?. It can be at any level. It could be something you?ve worked on, or tools or techniques that you like, or? Lemme know. Thanks, -Joel > On May 5, 2016, at 10:58 AM, Joel Shapiro wrote: > > Hi all > > We're going to be having our 10th annual(!) CWP User Group on Monday, July 18, 3:30-5:30pm (just before the 6pm opening keynote). > > Got something you'd like to share? Please let me know. > > Everyone's welcome. Come join us! > > -Joel > > http://jsfmp.com/cwp-user-group > ~~~~~~~~~~~~~~~~~~~~~ > Joel Shapiro > FileMaker Pro > : database design > : web development > http://jsfmp.com > 415-269-5055 > ~~~~~~~~~~~~~~~~~~~~~ From info at jsfmp.com Tue May 31 12:49:50 2016 From: info at jsfmp.com (Joel Shapiro) Date: Tue May 31 12:49:01 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? Message-ID: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> Hi all I?ve got a client that?s just created a brand new Windows Server 2012 VM to act exclusively as a ?vanilla' web server (no FileMaker components installed). They?ve asked me if they should install antivirus software on it. Googling returns a mixed response. What do y?all think? Thanks very much, -Joel From leo at finalresort.org Tue May 31 13:20:01 2016 From: leo at finalresort.org (Leo R. Lundgren) Date: Tue May 31 13:19:14 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? In-Reply-To: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> References: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> Message-ID: <96B49320-AC95-4131-9AE8-0A9B808432B1@finalresort.org> Check out Microsoft EMET. Also check out Tavis Ormandy's work on showing the insecurities of having AV software. Depending on your attack surface and threat model it's not always the right thing to install in the first place. Regards, Leo 31 maj 2016 kl. 20:49 skrev Joel Shapiro : > Hi all > > I?ve got a client that?s just created a brand new Windows Server 2012 VM to act exclusively as a ?vanilla' web server (no FileMaker components installed). > > They?ve asked me if they should install antivirus software on it. Googling returns a mixed response. What do y?all think? > > Thanks very much, > -Joel > > > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list From tim.webko at gmail.com Tue May 31 16:09:58 2016 From: tim.webko at gmail.com (Tim 'Webko' Booth) Date: Tue May 31 16:09:06 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? In-Reply-To: <96B49320-AC95-4131-9AE8-0A9B808432B1@finalresort.org> References: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> <96B49320-AC95-4131-9AE8-0A9B808432B1@finalresort.org> Message-ID: >From my reading over the years - AV software is not a bad idea, so long as you can _exclude_ the FileMaker Server directories - there have been issues with the AV scans causing FMS to think the file has been tampered with... On 1 June 2016 at 05:20, Leo R. Lundgren wrote: > Check out Microsoft EMET. > > Also check out Tavis Ormandy's work on showing the insecurities of having > AV software. Depending on your attack surface and threat model it's not > always the right thing to install in the first place. > > Regards, Leo > > > 31 maj 2016 kl. 20:49 skrev Joel Shapiro : > > > Hi all > > > > I?ve got a client that?s just created a brand new Windows Server 2012 VM > to act exclusively as a ?vanilla' web server (no FileMaker components > installed). > > > > They?ve asked me if they should install antivirus software on it. > Googling returns a mixed response. What do y?all think? > > > > Thanks very much, > > -Joel > > > > > > _______________________________________________ > > FX.php_List mailing list > > FX.php_List@mail.iviking.org > > http://www.iviking.org/mailman/listinfo/fx.php_list > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.iviking.org/pipermail/fx.php_list/attachments/20160601/d7289e41/attachment.html From leo at finalresort.org Tue May 31 16:16:05 2016 From: leo at finalresort.org (Leo R. Lundgren) Date: Tue May 31 16:15:21 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? In-Reply-To: References: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> <96B49320-AC95-4131-9AE8-0A9B808432B1@finalresort.org> Message-ID: It totally depends on your thread model. Regards, Leo 1 jun 2016 kl. 00:09 skrev Tim 'Webko' Booth : > From my reading over the years - AV software is not a bad idea, so long as you can _exclude_ the FileMaker Server directories - there have been issues with the AV scans causing FMS to think the file has been tampered with... > > > On 1 June 2016 at 05:20, Leo R. Lundgren wrote: > Check out Microsoft EMET. > > Also check out Tavis Ormandy's work on showing the insecurities of having AV software. Depending on your attack surface and threat model it's not always the right thing to install in the first place. > > Regards, Leo > > > 31 maj 2016 kl. 20:49 skrev Joel Shapiro : > > > Hi all > > > > I?ve got a client that?s just created a brand new Windows Server 2012 VM to act exclusively as a ?vanilla' web server (no FileMaker components installed). > > > > They?ve asked me if they should install antivirus software on it. Googling returns a mixed response. What do y?all think? > > > > Thanks very much, > > -Joel > > > > > > _______________________________________________ > > FX.php_List mailing list > > FX.php_List@mail.iviking.org > > http://www.iviking.org/mailman/listinfo/fx.php_list > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list > > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.iviking.org/pipermail/fx.php_list/attachments/20160601/67a9ab56/attachment.html From leo at finalresort.org Tue May 31 16:17:33 2016 From: leo at finalresort.org (Leo R. Lundgren) Date: Tue May 31 16:16:48 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? In-Reply-To: References: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> <96B49320-AC95-4131-9AE8-0A9B808432B1@finalresort.org> Message-ID: I meant threat model :) Regards, Leo 1 jun 2016 kl. 00:16 skrev Leo R. Lundgren : > It totally depends on your thread model. > > Regards, Leo > > > 1 jun 2016 kl. 00:09 skrev Tim 'Webko' Booth : > >> From my reading over the years - AV software is not a bad idea, so long as you can _exclude_ the FileMaker Server directories - there have been issues with the AV scans causing FMS to think the file has been tampered with... >> >> >> On 1 June 2016 at 05:20, Leo R. Lundgren wrote: >> Check out Microsoft EMET. >> >> Also check out Tavis Ormandy's work on showing the insecurities of having AV software. Depending on your attack surface and threat model it's not always the right thing to install in the first place. >> >> Regards, Leo >> >> >> 31 maj 2016 kl. 20:49 skrev Joel Shapiro : >> >> > Hi all >> > >> > I?ve got a client that?s just created a brand new Windows Server 2012 VM to act exclusively as a ?vanilla' web server (no FileMaker components installed). >> > >> > They?ve asked me if they should install antivirus software on it. Googling returns a mixed response. What do y?all think? >> > >> > Thanks very much, >> > -Joel >> > >> > >> > _______________________________________________ >> > FX.php_List mailing list >> > FX.php_List@mail.iviking.org >> > http://www.iviking.org/mailman/listinfo/fx.php_list >> _______________________________________________ >> FX.php_List mailing list >> FX.php_List@mail.iviking.org >> http://www.iviking.org/mailman/listinfo/fx.php_list >> >> _______________________________________________ >> FX.php_List mailing list >> FX.php_List@mail.iviking.org >> http://www.iviking.org/mailman/listinfo/fx.php_list > > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.iviking.org/pipermail/fx.php_list/attachments/20160601/e603ee50/attachment-0001.html From malcolm at notyourhomework.net Tue May 31 23:11:39 2016 From: malcolm at notyourhomework.net (Malcolm Fitzgerald) Date: Tue May 31 23:10:50 2016 Subject: [FX.php List] [OFF] Antivirus software on a Windows web server? In-Reply-To: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> References: <2F5FA070-EC49-4208-8559-9DB627D26D93@jsfmp.com> Message-ID: <8cbdf8af-f11c-62ad-0e62-6159d18c069d@notyourhomework.net> Why would you not? You'll lose a few clock cycles to forensic processes. In return you obtain a higher level of security and decrease the risk of malfeasance. The flip side is that you ignore the risk. When an unwanted event occurs you'll have to show that real benefits were obtained during the period before the machine was compromised. That shouldn't be hard, they'll be obvious to everyone and would have been used to rationalise the decision to go without antivirus software in the first place. The appropriate questions at that point will be, was enough benefit obtained to justify the repair costs and the downtime incurred, and will you continue to support the policy of running the server in the same fashion? good luck, malcolm On 1/06/2016 2:49 AM, Joel Shapiro wrote: > Hi all > > I?ve got a client that?s just created a brand new Windows Server 2012 VM to act exclusively as a ?vanilla' web server (no FileMaker components installed). > > They?ve asked me if they should install antivirus software on it. Googling returns a mixed response. What do y?all think? > > Thanks very much, > -Joel > > > _______________________________________________ > FX.php_List mailing list > FX.php_List@mail.iviking.org > http://www.iviking.org/mailman/listinfo/fx.php_list