2
votes
1answer
130 views

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to ...
1
vote
2answers
77 views

How to run a website securely on a server whose administration and security is outsourced?

I'm a web developer, and don't know much about system administration and security. Would it be possible for me to set up a site that processed credit card payment, payouts, bitcoin payments, or other ...
0
votes
1answer
95 views

How to set Jira default groups for new users?

I'm using Jira on demand and I'm trying to change the default groups a new registered user belongs to.
2
votes
1answer
128 views

Potential Bot-Net organizers probing for new machines?

I'm getting a number of exploit attempts from different IP's today. GET ...
0
votes
1answer
75 views

Web Server sercurity (used only for web services)

I am using a Virtual Private Server for accessing Web-Services used only on the Mobile devices, there are many entries in the access and error log, even there is nothing on the web server. I am ...
73
votes
16answers
7k views

How do I protect my company from my IT guy? [closed]

I'm going to hire an IT guy to help manage my office's computers and network. We're a small shop, so he'll be the only one doing IT. Of course, I'll interview carefully, check references, and run a ...
4
votes
1answer
167 views

Running a Windows server without an administrator in charge

I am dissolving my business as a Web Developer, and handing over all continuous work to successors. For one client for whom I have developed a number of web apps over the years, I set up a Windows ...
1
vote
2answers
720 views

How to hide the admin page?

The admin page is a page which allows me to access the database of my website. Of course, there will be a login screen there but I want to take measures that no one besides me will even ever see this ...
5
votes
4answers
1k views

Best way to securely communicate passwords and credentials to clients?

Often I end up doing server administration for clients as part of developing web applications, I always set up access for myself using an SSH Key pair. I usually end up choosing a random password for ...
14
votes
5answers
2k views

Updating production Ubuntu boxes the dos and don'ts

Every so often I login to production web/db/tools boxes and see the typical message: 30 packages can be updated. 16 updates are security updates. My question is, how do all of you handle updates on ...
3
votes
6answers
529 views

default ubuntu install, is it hackable?

Coming from a windows background, and I have admin'd a windows box for years now and I pretty much just have to install the patches (actually auto update takes care of that!). I am thinking about ...
3
votes
7answers
7k views

disable internet per user on windows xp

Is there a way I can disable internet access for a single account an XP Pro machine? Preferable something built-in like a security policy or something. Thanks!
6
votes
4answers
4k views

How do you manage service account credentials (passwords)?

In a Windows environment how do you address the following issues with service accounts? Regular Password changes - with single service accounts used on multiple machines how do you regularly change ...