Security is not a product, but a process.

learn more… | top users | synonyms (1)

3
votes
8answers
1k views

Why do https connections take longer to establish than straight http connections?

Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)? Just interested in knowing only. Thanks.
1
vote
2answers
42 views

building a SIEM, should I send logs or get them from the gathering machine?

I am working in a Linux environment, I would like to gather all the logs from the machine pool on a unique machine X. There are several log files I need to move and I am not sure about the way I ...
0
votes
2answers
2k views

EC2 instance always ask me to enter passphrase for the pem during connection

The pem file is generated by AWS console I was able to connect using the EC2 remote web interface, using the same pem file The permission of pem is 600 already Error.. ssh -i ~/test.pem -v ...
0
votes
0answers
14 views

Why does the Azure Portal not have session timeout? [migrated]

We have been using Azure for almost 5 years, and we are very concerned about security. One thing I really do not understand is why there is no session timeout in the Azure Portal (e.g. automatically ...
0
votes
1answer
29 views

Protect Chef config when a node is compromised

Imagine that one node of a system gets compromised. If I understand correctly hacker will be able to get all configs for all servers in a system using chef's API. Is that correct? If yes, is there a ...
2
votes
3answers
21k views

How to enable Audit Failure logs in Active Directory?

I have a user account that keeps on getting locked out. I am trying to find out what caused it. So I want to enabled failure audits in event viewer as a start. But, I don't know how! How do I enable ...
2
votes
2answers
959 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
-1
votes
1answer
26 views

Use 1 executable file to be distributed accross 100 client PROS and CONS guys? [closed]

for easy updates of our internal system I'm planning to use just 1 exe located at the server and just put a shortcut in my clients pointed at the exe in the server. PROS and CONS guys? Server 2008 R2 ...
2
votes
1answer
344 views

Host Header Attack with reverse proxies

So I was tasked with researching a problem that was identified by an Acunetix web security scan. Here are the details about the scan: Host_header_attack Automated Detection of Host Header Attacks I ...
3
votes
7answers
1k views

What can I do to replace FTP?

I'd like to replace FTP access with systems that are more secure. Sending passwords in plain text with no encryption is unacceptable and with single-sign-on growing, becoming less acceptable daily. ...
2
votes
1answer
244 views

IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?

I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS); TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ...
0
votes
1answer
24 views

trace apache access_log file record called by which html or php file

I figured out that my access_log have funny records 118.101.120.86 - - [20/Apr/2015:23:20:57 +0400] "\xed3.\xbd\xd5\xeb\x16\xca\xa4" 200 378 146.185.239.100 - - [20/Apr/2015:23:31:00 +0400] "GET ...
5
votes
1answer
115 views

Error connecting ESX 5.0.0 to domain

I am trying to connect an ESX 5.0.0 to our Domain Controler, in order to give a Domain group specific roles security. But I do not see any groups after the host connects to the domain. Under ...
3
votes
1answer
95 views

VLAN isolation failure with HP Procurve, Juniper Netscreen

I'm having problems with hosts being able to ping other hosts they shouldn't be able to communicate with. Fairly simple network - relevant hardware: HP Procurve 2810-24G switch Juniper Netscreen ...
1
vote
1answer
56 views

Weird server behavior, fear security breach but nothing on logs

These days my hosting (a2hosting) had an issue with the node hosting my VPS and during this period my users noticed a weird behavior other than the several restarts that happened while there were ...
0
votes
1answer
71 views

How can I disable specific file type uploads globally in Apache?

In order to secure my webserver, I would like to block specific file types from being uploaded globally, independent of what FTP users configure in their webpages. Is there a way to globally block ...
1
vote
2answers
35 views

Setting up a network for a Host Server and it's Guest OS

Is there a standard as to how one sets up networking on a Server Host that will have virtual servers within? In the past I've used virtualmin and set up the nic to have multiple alias such as eth0:1 ...
-5
votes
1answer
43 views

Is it possible to change wireless router BSSID? [closed]

I suspect someone is trying to hack our wireless network. I've stopped broadcasting the SSID, but assuming they've already attempted to gain access in the past they could have the BSSID stored, which ...
27
votes
1answer
2k views

Is MariaDB a secure replacement for MySQL?

I've been using MariaDB, "an enhanced, drop-in replacement for MySQL" on my Debian stable servers for years, because of its increased performance. However I've noticed that it appears to lag with ...
0
votes
5answers
1k views

Recommend an SFTP solution for Windows (Server & Client) that integrates well with Dreamweaver [duplicate]

Possible Duplicate: SSH / SCP Server on Windows Could you please recommend a secure FTP solution for updating files on a remote windows server from windows workstations? We would like to ...
6
votes
2answers
1k views

Is CRON secure?

I want to install cron on my live web server to run a daily backup script of a local folder. Are there any security considerations I need to be aware of when installing cron? My web server uses ...
3
votes
4answers
6k views

How Ubuntu cloud version enforces the “no root login” over ssh?

I'm looking to tweak ubuntu cloud version default setup where is denies root login. Attempting to connect to such machine yields: maxim@maxim-desktop:~/workspace/integration/deployengine$ ssh ...
1
vote
1answer
1k views

MS SQL Server configured for secure (SSL) connection allows non-secure connection from JDBC Client

I need to connect to the MS SQL Server 2008 r2 using the secure communication. I have been able to do the same using the following connection string: jdbc:sqlserver://<<db server ...
3
votes
7answers
11k views

How can I prevent explorer starting as a shell in a kiosk setting?

I'm using an alternative shell (a simple program that restarts a kiosk application if it dies) for a project I'm working on. I've set it via the Shell value in the registry, and I'm not using ...
-6
votes
1answer
109 views

Does a tool like ansible make it possibly to get a secure server, without knowing a lot about security? [closed]

If I modified something like this into a server similar to the one described here with a minimal set of services (what you need for ssh, basically) would it be reasonably secure? sovereign: A set ...
9
votes
6answers
671 views

DDoS. Are we that helpless? [duplicate]

With recent DDoS incidents related to wikileaks, I can't help but feel that pretty much all sites online are very vulnerable to such attacks. Visa, MasterCard (to name a few) have shut down because of ...
1
vote
0answers
40 views

Am I being picked up by a proxy sending my IP/request URLs to China? Sketchy

I spun up a new machine on Digital Ocean today which is pre-configured with a web environment. I made an initial request to the new site and found the following (IP address redacted) in my nginx ...
6
votes
2answers
692 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
3
votes
4answers
4k views

Unknown and strange RDP successful logins in EventViewer

I have a Windows Server 2008 R2 with a valid IP, and recently I've found hundreds of unknown and strange RDP successful logins logged in EventViewer. Here are some details: They are not similar to ...
0
votes
1answer
24 views

Secure elasticsearch but allow remote CRUD

I'm going to run a bit of software on server A to add and remove entries from elasticsearch on server B. How can I allow these remote create and delete operations, but still keep ES secure? Is ...
1
vote
2answers
53 views

How can I stop ansible from writing passwords to the logfiles?

I am setting up a MySQL server and want Ansible to set the mysql-root password during installation. With the help of the internet I came up with this solution: - name: Set MySQL root password before ...
0
votes
2answers
4k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
5
votes
4answers
956 views

Giving SSH access to a user, and security issues

Okay, so I have a VPS and I made an account for a friend so he can host his own domains (using the reseller features in DirectAdmin). He's asking for SSH access, and I know that this is probably a bad ...
1
vote
0answers
433 views

Nginx error: “File not found”…coming from someone else's domain

I set up nginx to serve from an Ubuntu EC2 instance a few days ago, and today I checked the error logs when I encountered 504 after 504 in the browser. I found the following in my error.log: ... ...
0
votes
1answer
21 views

Data security for PII

I have a question regarding data security. I have an application that dumps a flat Excel file on a Windows server from an SAP database. The file is edited, then the application writes the edited ...
-3
votes
1answer
36 views

Windows File Shares inside an Organisation [closed]

I came across to a security weakness that potentially can put information at risk in my organisation. Whenever I access other's computer in the network through the command: \\192.168.20.4\c$ I ...
1
vote
2answers
43 views

How do I drop requests from dig?

Basically I'm getting tons of request to my named/bind service, basically those requests are being rejected by named, Those are the messages i get, from tons of ips., How extacly can I drop those ...
3
votes
1answer
71 views

Restrict postqueue access to admin user

I'm running postfix on Gentoo as mailer daemon. During investigation of some queue pileup I found that /usr/sbin/postqueue is executable by all users on the system, it happily outputs the current mail ...
0
votes
2answers
50 views

Protecting mysql instance on Linux Azure VM

I have mysql running in a Linux Azure VM. It's currently bound to the "Internal IP Address" of the VM as looked up in ifconfig and the Azure Dashboard. I've turned on logging to see who and what is ...
2
votes
2answers
43 views

Does DNSSec NSEC3 require support from the Registrar, DNS Server or both?

I'm interested in getting NSEC3 support for my domain getvalid.com, so that I can prevent name traversal. DYN doesn't seem to support NSEC3, and it's clear that BIND and the DNS server require the ...
17
votes
1answer
16k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
1
vote
0answers
60 views

Managing IAM security credentials for multiple docker containers

Within plain EC2 environment, managing access to other AWS resources is fairly straightforward with IAM roles and credentials (automatically fetched from instance metadata). Even easier with ...
10
votes
2answers
15k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
-2
votes
1answer
115 views

How to secure OwnCloud? [closed]

I am not literate when it comes to servers, but I like the idea of having my own cloud storage for privacy reasons. OwnCloud is targeting (at least a little bit) the "DIY-home-user" so it seemed to be ...
2
votes
1answer
1k views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
0
votes
0answers
24 views

Warnings in Tiger auditing reports (process is listening on socket)

I get email logs like the ones below emailed daily from my server. I don't really know what does it mean and thinking about disabling them, but I guess this is not a good idea and it's better to learn ...
14
votes
7answers
4k views

Should I bother to block these rather lame attempts at hacking my server?

I'm running a LAMP stack, with no phpMyAdmin (yes) installed. While poking through my Apache server logs I noticed things like: 66.184.178.58 - - [16/Mar/2010:13:27:59 +0800] "GET / HTTP/1.1" 200 ...
0
votes
2answers
47 views

Disable ssh login on specified time for particular users

I would like to disable ssh login to my system for particular users say X,and Y on specified time 17.00 to 18.00. so how to achieve this ? any help would be appreciated.
1
vote
2answers
54 views

Where are MySQL users and passwords stored?

When I delete 'mysql'.'user' table I'm still able to log in as any user I've created before. How is this possible?
0
votes
2answers
1k views

Disabled IPV6 but still showing in netstat

newbie here, for security best practice I want to disable IPV6 (not to deal with IPV6 firewall settings). I use Hetzner root server Ubuntu 12.04 . /etc/sysctl.conf file already have a setting from ...