Security is not a product, but a process.
2
votes
1answer
13 views
How safe is it to protect an ssh key without passphrase using the “command” option in the authorized_keys file?
There are times where using ssh keys with empty passphrase is highly
desirable (backups, ...). The well-known problem is that such keys are
safe only to the point they are kept from untrusted hands.
...
1
vote
1answer
21 views
what would be a better practice instead of chmod g+r /etc/shadow so I can use Unix user/group database for Jenkins authentication?
I don't want to run Jenkins as root, nor giving public access (or even group access) to /etc/shadow seems to a good idea.
as suggested by "Manage Jenkins" when selecting Linux user/group database:
...
0
votes
0answers
13 views
User security settings for scheduled task on Windows Server 2008 R2
I have a simple executable to run as a scheduled task on some Windows Server 2008 R2. The executable downloads a file from a couple of locations, then writes the time to download the files to a SQL ...
0
votes
0answers
7 views
Disabling Server Header from Groupwise Mobility
My Groupwise Mobility server application sends a server header with name and version. Is there a configuration possibility so I can disable it somehow? I couldn't find anything helpful so far.
3
votes
4answers
70 views
If, using public keys only, an SSH client logs into (or is already logged into) a compromised SSH server, is the SSH client at risk too?
Are there conditions under which an attacker with control over the server could gain access to and initiate actions on the client? I realize the attacker could plant trojans on the server in the hope ...
0
votes
1answer
29 views
Is It Possible to Copy an AWS Security Group?
We have some security groups that have quite a few rules in them. Rather than having to recreate the same rules for a number of security groups just to accommodate minor differences, is it possible to ...
-1
votes
1answer
30 views
Access Control Lists & DHCP
Please take a look at this image right here.
In the image above you can see a virtual netwerk simulation program (CISCO Packet Tracer 6.0) where I'm trying to setup a network and secure it.
However ...
0
votes
2answers
48 views
Should I be concerned with seeing this in my logs?
The following requests (this is about half of them) in my Nginx access log have all come over the span of a few minutes from an IP that is registered to an ISP in Vietnam (I could provide the IP, but ...
-1
votes
2answers
46 views
su command works without prompting password
I'm on a RHEL server where the su command drops the user into root without prompting for a password. Obviously, this is a pretty big cause for concern which I'd like to fix. I'm not in contact with ...
1
vote
1answer
25 views
Windows 7: Update a file in the system32 folder via GPO
I'd need to update a Windows file in the system32-folder
I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine.
I've created a ...
0
votes
0answers
7 views
What permissions are required to change log on as service policy
I have a Windows 8 Pro machine running Hyper-V, and several virtual machines.
I am getting the issue that has been discovered whereby you occasionally get an error message when ...
-2
votes
0answers
23 views
FTP Chroot Broken or what [closed]
In regards to https://www.facebook.com/SolidShellSec/posts/580682168629285 they say PureFTP has broken CHroot system and symlinks can be followed? What is this bug? Is is patchable or should I switch ...
-3
votes
1answer
38 views
Can I block android phones from my company wireless network? [duplicate]
Network is password protected, all employees have access to password. Company policy is only company approved and provided devices are allowed on network. We can not tell who is logging in on ...
0
votes
1answer
32 views
curl fails to take self signed certificate
I've installed apache 2 server with self signed certificate.My browser is showing 'It works!' when I tried to connect to the sever. But from an application when I issued cur_easy_perform() the call ...
0
votes
1answer
25 views
How can I configure a Ubuntu LAMP web server with permissions like CPanel?
I know how to set up a LAMP stack on Ubuntu pretty well for a single website / single user, but I'd like to allow multiple users to host multiple sites on a single server.
This is for different ...
0
votes
1answer
17 views
What are the security implications of STARTING a reverse proxied origin server as an unprivileged user?
A common recommendation as part of web server security is to run the server daemon as an unprivileged user (e.g.: nobody) so that exploits executing arbitrary code may have less unwanted effects. ...
0
votes
0answers
9 views
Setup cherokee as a shared hosting platform
I would like to use cherokee webserver to host multiple websites NOT on one account, simular to cPanel(I don't need or want all cPanel has to offer and as far as I know still can't use Cherokee) . In ...
0
votes
2answers
20 views
apache: restricting access by network
Im working on a (linux based) device that has 4 network interfaces: two wired, one wireless and a VPN. The device has a web 'control panel' of sorts that I want to restrict access to. Ideally it ...
0
votes
1answer
32 views
Ubuntu Server DDoS protection
I've seen many articles on DDoS protection, but none work. I need protection for a socket server i'm running on the server. It's running on port 9876 and it's for a flash-based game. when it gets ...
-1
votes
1answer
23 views
How to disable SSL/TLS compression in Apache 2.2.16?
I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off.
I tried to search google, but didnt ...
-1
votes
1answer
20 views
SSL secured account section, Subdirectory vs Subdomain [closed]
I'm currently running Drupal on an nginx server, and I also have a separate user account system running on account.domain.com. I purchased a wildcard SSL certificate to protect the login form, but the ...
-1
votes
1answer
71 views
how is possible to become root without having the password and only a ssh login?
I am having a problem, I have one server, I have my root account, but some other co worker has an ssh login, still... I have no so much experience and I dont know what I could do to block him to ...
3
votes
1answer
65 views
Traffic backlogged after (D)DoS attack? [closed]
About 25 hours ago, I got an e-mail from UptimeRobot (uptimerobot.com) telling me that me websites had gone down.
I raced over to my server room, where my TP-Link router was completely unresponsive ...
1
vote
1answer
61 views
Limited SSH access for log retrieval
I want to have limited access to a Linux server to be able to grab a certain set of logs. Ideally, I would like to be able to run rsync locally to grab the logs from the server and for security ...
-1
votes
0answers
30 views
motion - usb camera not working on monitoring server [closed]
I had a Debian Squeeze server running, which monitored our building with cameras. I installed a new server now with Debian Wheezy and all except on camera are working. It's a USB camera(Pixart ...
3
votes
1answer
55 views
How can I proactively detect compromised Exchange 2010 accounts?
We have had issues with compromised Exchange accounts sending out malicious e-mails via SMTP and OWA.
It seems that many of these accounts were compromised via incoming phishing attempts. We are ...
2
votes
1answer
33 views
Remote disk monitoring with WMI without admin rights
I am setting up a restricted WMI group that should be able to read WMI information from my remote hosts.
I have the group set up as member of the remote DCOM and performance monitor groups. I also ...
4
votes
2answers
75 views
Should I delete the .pfx or .cer files after importing the SSL cert?
When provided, I have to import into IIS on Windows Server (2008 R2) using either a .pfx or .cer to get SSL certs ready for use.
My question is, is should I delete these files after I have ...
0
votes
1answer
36 views
How to update/maintain a patched kernel?
If I patch my linux kernel with grsecurity, will I still be able to update my system with yum (or apt-get)?
Won't the updates available via yum be incompatible with my patched "non standard" version ...
4
votes
7answers
314 views
Configure a “hardened” user account that an attacker would have a hard time abusing
Suppose you have a Windows Server machine running various sensitive services. Suppose that one of these services is pretty simple, maintaining a small amount of information in a text file, but as a ...
16
votes
1answer
376 views
What's the importance of the email address in the DNS SOA lookup?
Is there a real importance in this, except to publish the email address of the person responsible for some DNS zone?
In our BIND configuration, we put a mailling list as the responsible for our ...
0
votes
3answers
28 views
VPS security considerations when only accessing from one IP [duplicate]
I'm running an VPS where I have deployed some projects. As I am the only person who accesses the server and I furthermore have a fixed IP i decided to configure iptables so that server access is only ...
0
votes
1answer
16 views
Using authority-given .cer file to login on remote servers on OS X
A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
2
votes
2answers
71 views
VLAN & Communication
I'm working on a project regarding Network Security and I've come to the topic regarding VLANs.
I was wondering if it is possible to set up multiple VLANs (VLAN0, 10, 20, 30) in a way that all VLANs ...
2
votes
0answers
23 views
Technical security issues with proactively executing a phishing campaign targeting your own users [migrated]
We've had some issues with compromised accounts due to users falling victim to phishing campaigns.
The possibility of us doing a phishing campaign against our own users to proactively shame them has ...
1
vote
2answers
43 views
How to configure transport CONFIDENTIAL in Apache HTTPD server?
We had only one VirtualHost in our Apache 2.2 server configuration:
<VirtualHost _default_:443>
Our customers want be able to put in the browser only the server name in HTTP (e.g. 10.10.0.1) ...
0
votes
1answer
18 views
new user and problems with ssh key configuration (pub vs pem files)
We access our ubuntu server from outside over ssh this way :
ssh -i securityTier.pem -l someUsername serverDnsName
I need to create new user which will use separate *.pem file. So far i created :
...
0
votes
2answers
39 views
-bash: www.mydomain.com.pem: Permission denied
I have these three files in /etc/nginx/ssl folder:
www.mydomain.com.csr
www.mydomain.com.key
www.midomain.com.key.nopass
I bought and downloaded the positive ssl certs in ...
0
votes
1answer
30 views
Linux user permissions setup for monitoring tool
We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
2answers
26 views
Managing security (Java) access in a shared environment
While developing a shared hosting solution for Java applications we have encountered an issue, since users can upload their own jars how do we restrict them from running Linux commands such as df -h ...
0
votes
1answer
36 views
More server in a net security
I have two ubuntu server into my company:
1) backup server which only backup computer or remote server (IP: 192.168.1.253)
2) real server which contains all data file apache where run our demo project ...
1
vote
0answers
49 views
Someone hacked my system [duplicate]
I have two linux server.
Another company phoned me that my IP try to connect into their server every 8 seconds.
I have a server with a firewall(shorewall) and a server without it.
But now I want to ...
0
votes
1answer
41 views
Are empty HTTP requests malicious?
I have seen multiple empty http request log entries from Apache:
HOST:443 REMOTEIP - - [DATA AND TIME] "-" SIZE SIZE "-" "-"
Are these malicious attacks, or some misconfiguration on my side?
1
vote
0answers
36 views
Restrict users to certain applications only
We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication.
Please let us ...
2
votes
3answers
111 views
Why should I never run software as root, yet it is frequently recommended to give an account root-access to run software? [closed]
I am a long time technical professional but 100% of my work has been within a Windows environment. I have a pretty good level of understanding of many of the technical issues such as user account ...
1
vote
1answer
54 views
How to forbid user to bind a socket on other than a certain address?
I want this user not to be allowed to bind ports (effectively creating world-accesible servers, though on ports >1024) on the Internet interface, but be allowed to do in the loopback interface on ...
-1
votes
0answers
13 views
fail2ban being attached with false IP address [closed]
I am wondering if this could be possible:
The hacker send TCP/IP packets with "false IP address" to the server with fail2ban installed. Those false IPs will be banned by fail2ban program so those ...
0
votes
1answer
37 views
Restrict access to SQL Server backups based on user?
Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...
3
votes
3answers
241 views
How do I secure a Dell Idrac card?
I'm trying to completely lock down a server which has to exist outside of a firewall/directly routed to the internet and whilst I have hardened the base OS to the best of my ability, I had a moment of ...
2
votes
2answers
447 views
How do I protect an Apache (in LAMP) install against the Apache Linux/Cdorked.A backdoor?
Just like the title asks, what can I do to protect against infection by the Apache Linux/Cdorked.A backdoor?
