Re: Hiding Subversion version number

2017-12-16 Thread Branko Čibej
On 16.12.2017 21:25, Daniel Shahaf wrote: > Eric Johnson wrote on Sat, Dec 16, 2017 at 07:05:52 -0800: >> Hiding that information slows the drive-by attackers down, > Hiding that information is a pretty clear signal that "I think I'm an > interesting target", though. Everyone who's serious about s

Re: Hiding Subversion version number

2017-12-16 Thread Daniel Shahaf
Eric Johnson wrote on Sat, Dec 16, 2017 at 07:05:52 -0800: > Hiding that information slows the drive-by attackers down, Hiding that information is a pretty clear signal that "I think I'm an interesting target", though. Everyone who's serious about security knows that the right answer is to config

Re: Hiding Subversion version number

2017-12-16 Thread Eric Johnson
Hiding the version information is but a piece of the puzzle. It won’t save a server from a persistent attacker. However, hiding the server software, and the software version, makes it harder for “drive-by” attackers to discover that your server is vulnerable. They don’t generally want to spend the

Re: Hiding Subversion version number

2017-12-16 Thread Dave Huang
On 12/16/2017 5:38, Branko Čibej wrote: On 15.12.2017 16:15, Dhanushka Parakrama wrote: Hi All Is there any configuration where i can hide  the subversion version details .Please see copied image Inline images 1 You could start by telling us *where* you see that image. In a browser, I presume

Re: Hiding Subversion version number

2017-12-16 Thread Matt Simmons
OT, but you can see one here: http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-44ver2.pdf (specifically, section 5.1: Reconfigure HTTP service banner (and others as required) not to report Web server and OS type and version ) There are, of course, mandates to use up to date s

Re: Hiding Subversion version number

2017-12-16 Thread Matt Simmons
This sounds like the ServerSignature directive https://httpd.apache.org/docs/2.4/mod/core.html#serversignature Have you turned it off? On Fri, Dec 15, 2017 at 7:15 AM, Dhanushka Parakrama < parakrama1...@gmail.com> wrote: > Hi All > > Is there any configuration where i can hide the subversion

Re: Hiding Subversion version number

2017-12-16 Thread Branko Čibej
On 15.12.2017 16:15, Dhanushka Parakrama wrote: > Hi All > > Is there any configuration where i can hide  the subversion version > details .Please see copied image Inline images 1 You could start by telling us *where* you see that image. In a browser, I presume? Generated by which server? It's cer

Re: Hiding Subversion version number

2017-12-16 Thread Branko Čibej
On 15.12.2017 20:10, Matt Simmons wrote: > Many documents relating to information security compliance require > blocking visible software version information. Interesting documents. I'd have expected them to require all software to be patched to fix all known security bugs. I thought the "security

Re: Hiding Subversion version number

2017-12-15 Thread Matt Simmons
Many documents relating to information security compliance require blocking visible software version information. On Fri, Dec 15, 2017 at 10:46 AM Nico Kadel-Garcia wrote: > Why would you want to hide this? > > On Fri, Dec 15, 2017 at 10:54 AM, Dave Huang wrote: > > On Dec 15, 2017, at 9:15,

Re: Hiding Subversion version number

2017-12-15 Thread Nico Kadel-Garcia
Why would you want to hide this? On Fri, Dec 15, 2017 at 10:54 AM, Dave Huang wrote: > On Dec 15, 2017, at 9:15, Dhanushka Parakrama > wrote: > > > Hi All > > Is there any configuration where i can hide the subversion version details > .Please see copied image

Re: Hiding Subversion version number

2017-12-15 Thread Dave Huang
On Dec 15, 2017, at 9:15, Dhanushka Parakrama wrote: > > Hi All > > Is there any configuration where i can hide the subversion version details > .Please see copied image I think that's controlled by the Apache ServerSignature configuration option (https://httpd.apache.org/docs/2.4/mod/core.

Hiding Subversion version number

2017-12-15 Thread Dhanushka Parakrama
Hi All Is there any configuration where i can hide the subversion version details .Please see copied image [image: Inline images 1]

RE: version number

2016-02-21 Thread Ren Wang
Hi Andreas, Thank you so much for the answer! Ren -Original Message- From: Andreas Mohr [mailto:a...@lisas.de] Sent: Sunday, February 21, 2016 9:40 AM To: Ren Wang Cc: users@subversion.apache.org Subject: Re: version number On Sun, Feb 21, 2016 at 08:45:56AM -0500, Ren Wang wrote

Re: version number

2016-02-21 Thread Ryan Schmidt
On Feb 21, 2016, at 7:45 AM, Ren Wang wrote: > Is there a way or API to set and get a file version number instead of > revision number? For my case, when a file is created, the version by default > should be 1, every change the version number will be incremented by 1. No, Subversio

Re: version number

2016-02-21 Thread Andreas Mohr
On Sun, Feb 21, 2016 at 08:45:56AM -0500, Ren Wang wrote: >Is there a way or API to set and get a file version number instead of >revision number? For my case, when a file is created, the version by >default should be 1, every change the version number will be incremented

version number

2016-02-21 Thread Ren Wang
Is there a way or API to set and get a file version number instead of revision number? For my case, when a file is created, the version by default should be 1, every change the version number will be incremented by 1. Regards, Ren