Correct file permissions for core files?

That’s what we tend to advise, and works out in many situations. The trick is what process “you” are and your web server is…

Here’s some more reading on the topic: http://codex.wordpress.org/Hardening_WordPress#File_permissions