[development] Fully patched site hacked and cloaked

[David Strauss]

On 2010-01-27 16:09, Nicolas Tostin wrote:
> Is it a good security tip to monitor the integrity of Drupal sources by
> using MD5 hashes on the files ?
> Is there a known/efficient way to achieve this ?

We deploy some client sites by RPM. That implicitly supports timestamp
and hash verification tools.

-- 
David Strauss
   | david at fourkitchens.com
   | +1 512 577 5827 [mobile]
Four Kitchens
   | http://fourkitchens.com
   | +1 512 454 6659 [office]
   | +1 512 870 8453 [direct]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
Url : http://lists.drupal.org/pipermail/development/attachments/20100127/22ae9987/attachment.bin