Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. Resources Information security (Wikipedia article).
0
votes
1answer
19 views
Windows Copy and permissions
I have copied a which has Everyone permission. The duplicated file doesn't have these permissions other than the default permission. I'd like to know more about how Windows Copy defines the ACLs. It ...
2
votes
2answers
84 views
XP server allows all domain users to c$ share
I have an XP Pro computer acting as a Quickbooks server. I've noticed that any user on the domain can access the computer via \\quickbooks\c$. I've looked in the local Administrators group on the ...
0
votes
1answer
23 views
Nmap / Batch: alert if only ports usually closed are opened?
Context
I check open ports on my server with a scheduled batch file:
nmap.exe server1 server2 server3 etc >> log.txt
Usually 21, 22, 80, 443 and 3389 are opened.
Now I want to send an email ...
0
votes
2answers
34 views
Mixing SPF records
I have the usual Google Apps SPF record in my DNS:
v=spf1 include:_spf.google.com ~all
and now, since we are using ZenDesk, I should also add:
v=spf1 include:support.zendesk.com ~all
Should they ...
-1
votes
1answer
18 views
gotroot mod_security rules
Are the gotroot mod_security rules any good?
I've heard that you will get a lot of false positives and before I try and use them on a live box just wanted to know if anyone else has experience with ...
0
votes
4answers
91 views
SSH: what is the best way to achieve secure connection with dynamic IP?
I'd like to have my own distant server, and to connect to it through SSH.
But I'd like to do it through many PCs (i.e. many different IPs), do you have any advice / secure solution for doing this?
0
votes
1answer
37 views
MySQL: Load_file - list files
Is it possible to list files with MySQL's Load_file()? Is there any meta file that would contain the file names or so? Thanks
8
votes
1answer
126 views
What are the best linux permissions to use for my website?
I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/.
/var/www/contoso.com/
/var/www/contoso.net/
/var/www/fabrikam.com/
The base ...
1
vote
1answer
20 views
openVAS scan against new instance fails test (possible false positive) How to debug plug-in
I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
-1
votes
0answers
33 views
What's recommended cell-phone communication encryption software? [closed]
I'm looking for software that will provide secure cell phone communication. It should target mostly iPhone devices, but Android/Blackberry support is a plus.
It's a must that there are no 3rd party ...
0
votes
1answer
31 views
Custom www-data user in Ubuntu
I use apache2-mpm-itk to run one of my web applications with a custom uid and gid, both for audit and security reasons. This works nicely, however I am not sure what kind of privileges this user would ...
3
votes
2answers
122 views
Attack on my web server - What could this mean
My provider informed that there is an outbound attack on my web server. On further inspection I saw this in my Apache error.log file:
--2012-02-04 04:40:59-- ...
2
votes
1answer
49 views
Getting false-positive SQL Injection reports
We have installed a new Juniper SRX firewall with IDP, so the firewall is inspecting the traffic for suspicious activity.
I've encountered 3 "false-positive" reports for SQL injection attacks that ...
1
vote
0answers
35 views
Nginx, uWSGI, Python, users, groups and permissions. Questions about security
Ok, yesterday I finally get nginx and uWSGI servers running on my PC.
Nginx and uWSGI configuration files, new users, groups and their privileges, and chrootdir for SSH I configured
based on knowledge ...
2
votes
1answer
56 views
Retaining root access while not being able to access emails
I'm the sysadmin for a medium sized business, we run our own mail server on premises (linux). Of course, I have sudo privileges on that box, and the email server stores emails in mbox format so in ...
1
vote
1answer
25 views
OpenSSH 5.9p1 on Ubuntu 11.10
I want to build a deb package with the latest version of openssh from source. Then I want to install it on my machine.
I am running:
Linux Ubuntu-1110-oneiric-64-minimal 3.0.0-12-server #20-Ubuntu ...
0
votes
0answers
41 views
What does the red x icon mean next to a user in folder permissions (Windows 7)
In trying to debug various strange issues on a machine, I found something strange - when I go to C:\Users\administrator and get properties, security tab, it lists the users (the local admin account, ...
5
votes
6answers
378 views
VP is demanding admin access to PC to install apps - What is a good containment strategy? [closed]
Possible Duplicate:
How to convince a big boss that he does not need administrator privileges?
I'm an IT manager in a small company (40 employees). We have a decent IT security policy in ...
2
votes
0answers
27 views
Securing access to virtual directories with valid users determined by part of the URL
I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
1
vote
0answers
15 views
ejabberd changing ports?
I changed the ports in the listen section (just added a 1 in front of them) in the /etc/ejabberd/ejabberd.cfg, but after a
/etc/init.d/ejabberd restart
The server still listens on the original ...
0
votes
1answer
14 views
Connecting to a server inside a DMZ
in this scenario
[ net2 / 10.0.1.1 ] ---- [ net1 / 10.0.0.1 ] --- ( Internet )
| |
< pc2 > < ...
2
votes
1answer
35 views
What are the potential problems with globally setting ulimit to unlimited?
My team recently had an issue with ulimit being set too low on our Apache servers. We talked about increasing the limit to some arbitrary number, but we couldn't think of any reason not to just ...
1
vote
1answer
13 views
How do I restrict the available work items for support desk users in TFS 2010
We run TFS 2010 and use the work items. We are migrating the support desk but don't want them to be able to raise bugs, tasks etc - is there a way to lock them down to just issue? Also despite ...
1
vote
2answers
39 views
Unknown process on port, lsof no help, nfs-kernel-server?
During a standard security sweep we found out a something was listening on a port unknown to us, 2030, and we are having trouble determining the source.
# netstat -anp | grep LIST
tcp 0 0 ...
2
votes
1answer
69 views
Configuration Compliance auditing for many CentOS 5.x boxes
Current Situation
I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or ...
1
vote
1answer
39 views
Can IIS be configured to serve different sites depending on the ip of the incoming connection?
I'm looking to serve a "Work in progress" page to most of the internet, while allowing access to the site itself from a few specific, test, ip addresses.
Is this doable with IIS 7? How would you go ...
0
votes
3answers
44 views
Windows Server 2003 W3SVC Failing, Brute Force attack possibly the cause
This week my website has disappeared twice for no apparent reason. I logged onto my server (Windows Server 2003 Service Pack 2) and restarted the World Web Publishing service, website still down. I ...
0
votes
1answer
76 views
Cisco ASA - Enable communication between same security level
I have recently inherited a network with a Cisco ASA (running version 8.2).
I am trying to configure it to allow communication between two interfaces configured with the same security level ...
-1
votes
0answers
47 views
Summer Internships (for IT/Security/Networking?) [closed]
I know these are a common thing to do during the Summer semester for Computer Science students at large companies like Facebook, Apple, Google, etc.
Are there similar internships available for IT ...
10
votes
7answers
268 views
What are some secure alternatives to FTP?
This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy.
I know about and use scp already, but sometimes I want to share files with someone ...
0
votes
2answers
28 views
Securing a directory using htaccess but with different levels of access
I am trying to secure a directory by IP address. I need to access the directory from my ip address (through the browser) and no one else. But I also need to access it via cron (cli). I also have ...
1
vote
1answer
27 views
Do Mac OS X servers have a security mechanism that blocks a user if they log in from two different IPs?
A trusted friend and I had ssh'ed into a Mac OS X Web Server (either snow leopard or lion) from two different locations. Then my password stopped working when trying to log in.
I can safely rule out ...
1
vote
1answer
70 views
Implementing 2-factor authentication for Windows Server RDP
We want to implement 2-factor authentication for all our servers.
For SSH, we use authkeys. What can we use for Windows Server 2008 R2 RDP?
0
votes
1answer
91 views
Offshore application development - Access to dev network (Security best practice)
Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist.
The situation is:
Dev and Prod subnets (Not sure if ...
0
votes
2answers
53 views
open_basedir and wordpress
Essentially i found out you can prevent one site which has a security hole from modifying/reading another site via "open_basedir".
However when i upload media files using wordpress i got the error
...
0
votes
1answer
62 views
n00bie Linode VPS - am I reasonably secure? How to audit?
Total Linux n00bie - first time VPS setup (Linode.com).
I've spent a month researching and attempting setups. After a few dumps and reinstalls, I finally have a server up and functioning (been up ...
0
votes
0answers
6 views
securely exposing sql server 2008 for windows authentication [migrated]
we have an internal sql server 2008. currently we do not expose the IP to the outside.
we will have 100 users connecting to this database remotely, and now we will have to expose the IP to the ...
2
votes
1answer
67 views
Is KB2641690 required on W2K3 running IE6
KB2641690 is an update to the Microsoft Untrusted Certificate Store but it not detected as required by MBSA.
It is not installed on my machine and does not appear to be superseded by anything.
Any ...
-4
votes
2answers
63 views
Monitored network at the office [closed]
Network security is not exactly my area of expertese so I apologize if I've phrased this question wrong or if it's already been asked somewhere:
If I am on a network that is monitored, like the ...
0
votes
2answers
34 views
Cached Exchange Mode Security
Background: I work at a financial company with very strict security guidelines. We're in a scenario now where we have to enable cached exchange mode for a couple of our remote offices. However our IRM ...
0
votes
1answer
85 views
Rule to block IP address not working
Looking at my Event Log I see that right now an attempt is being made at brute forcing my 'sa' user for Sql Server on my Windows Server web edition box. I know that firewall rules are not the only ...
0
votes
0answers
37 views
Malicious login attempts on my server [closed]
Possible Duplicate:
Is it worth the effort to block failed login attempts
The last three days I get email from OSSEC with things like:
Jan 25 21:09:07 responsible-disclosure ...
1
vote
1answer
40 views
An attack? What are the second status codes(286, 289) for in the log (a web scan)?
Going through my assess-logs today, I found so many entries trying to access pages. (that were not present). Like
robots.txt (I know what this is used for)
apply
favicon.ico(I know what ...
0
votes
1answer
41 views
Exchange 2010 OWA with Client Certificates
I have enabled Client Certificate Authentication for Exchange 2010 through IIS7 and the users are prompted to choose their User Certificate when they log in, but they are all then presented with the ...
0
votes
2answers
43 views
CentOS: E-mail notification of failed ssh login attempts
Under CentOS, I need a script that will run every 10 minutes and e-mail me if there are any new failed ssh login attempts in /var/log/secure.
2
votes
3answers
42 views
Primary domain controller for web hosting + SQL cluster
I was hoping to get some advice here on a web hosting query. We are building an eCommerce website that will basically reside on 2 x web servers (fronted by a load balancer) and interacting with a ...
0
votes
0answers
14 views
Draytek Vigor 5510 pro blocking attachments un-necessarily
I have installed Draytek vigor pro 5510 which I may say is one of the hardest ones on the planet to configure but I have now gained success with it in blocking URL(s) successfully but when I implement ...
1
vote
2answers
29 views
Security Policy based on Subnet
We are implementing a security policy and Firewall access rules based on the subnet using static dhcp bindings.
There is one scenario where some one can manually assign ip address from a subnet with ...
1
vote
2answers
48 views
Keep LAMP server up to date and secure
As a webdeveloper I have, like many, my own VPS. However, I am a webdeveloper, not a system manager. For me it's quite challenging to install a VPS and to keep it up to date and secure. It takes me ...
-1
votes
1answer
58 views
Does Plone 3.3.6 have all the recent security hot fixes included?
We recently upgraded to Plone 3.3.6 from 3.3.5. Being paranoid I have left in the 3 recent hot fixes
Products.PloneHotfix20110720, Products.PloneHotfix20110531 and Products.Zope_Hotfix_20110622 in ...
