What not to do when your customers are down

摘要

IT consultants and contractors must be careful not to kick their clients when they're down. The following real-life story involves an excruciatingly stupid client that owns a Linux box running a variety of packages, including a major mainstream database. The client approaches system administration in an ad hoc manner, fostering the attitude, "If it ain't broke, don't fix it." Linux doesn't get hacked right? Well, the open source operating system might not be an easy target but that doesn't mean the customer's Web servers and Web programming languages don't have holes. The result: after two years of not applyingpatches, this client's server is hacked.