Security is not a product, but a process.

learn more… | top users | synonyms (1)

6
votes
13answers
8k views

Relatively easy way to block all traffic from a specific country?

I know this sounds terrible, but I have a web app that has no users in the Philippines, but is constantly bombarded by spammers, carders testing cards, and other BS from there. I can see in the logs ...
3
votes
1answer
2k views

Setting the secure flag on cookies from Outlook Web Access

I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
0
votes
1answer
30 views

Modify the Windows failed logon message

Is there a way to modify the message that the user sees following the entry of an insecure password, whilst changing/resetting their password, on Windows 7 / 2008 Server machines? Basically, the ...
1
vote
8answers
3k views

No success when trying to upgrade glibc on RHEL4 due to GHOST

Due to the recent GHOST vulnerability I was trying to upgrade the glibc version on our RHEL4. The command I tried using was: rpm -Uvh glibc-2.3.4-2.57.x86_64.rpm Result was: [root@rhel4-test ~]# ...
0
votes
3answers
347 views

DDoS Network Protection Devices

In our office we're running a Cisco ASA 5510 firewall. Is this device enough if we want to protect against DDoS attacks? What devices (like cisco guard, etc) do you recommend and what's the user ...
-1
votes
1answer
40 views

Un-Noticed Vulnerability, I need to know if i should do anything

Possible Web-Site Vulnerability. I'm not sure if this is the right place to ask this, but I am running my own website, that is still currently being developed, but since it is 'Open as Beta' it is ...
4
votes
4answers
225 views

Securing elasticsearch

There appears to be a serious lack of information on this despite the fact that as installed elasticsearch is extremely exploitable. My main fear in using it is that as a non-expert I have no idea ...
1
vote
2answers
86 views

Copying data between AWS EC2 machines

There are times where, in order to do some debugging or perhaps a manual migration, I need to copy large chunks of data from one EC2 instance to another. When the size of the data is tiny, it's simple ...
1
vote
2answers
36 views

Why is this server generating outbound IRC connections? [duplicate]

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but ...
1
vote
1answer
226 views

Mounting /home as noexec [closed]

Does mounting /home with noexec really add security? All it does is disable binary execution right? So that means other scripts can still run and execute shell code into services. Run shared ...
1
vote
1answer
377 views

nginx - deny all *.php requests except index.php for security reasons

os: CentOS 7 nginx: 1.6.2 httpd: apache 2.4.6 cms: Drupal 7 After my server was compromised I removed all from server, reinstalled OS and soft, and restored data from backup. Now I configure all ...
0
votes
1answer
48 views

Block file browsing on Windows Explorer

I have a Citrix application that open Windows Explorer from a menu. The command invoked to open Explorer is: Explorer "g:\app\folder" What happens when Explorer is opened is that it shows a window ...
2
votes
2answers
4k views

Too many csrss.exe, LogonUI.exe, svchost.exe and winlogon.exe in task manager

On a windows server 2008 enterprise edition, nothing has changed but recently there are many csrss.exe, LogonUI.exe, svchost.exe and winlogon.exe processes in task manager. Does it mean some remote ...
0
votes
1answer
34 views

Safest way to allow a user to write in www directory?

I mean allowing a user to modify the web files in the server. Should I change the ownership of the www directory to a certain user, or put it in a new group and give write permission, or something ...
1
vote
1answer
43 views

How can a PC be protected from malware without locally installed software?

I'm looking to find a way to protect PCs, without requiring locally installed software. I thought about a device such as a Watchguard that has UTM facilities and make it a transparent proxy, in ...
2
votes
0answers
48 views

Unable to reset IPMI cipher using ipmitool: “Parameter Data does not match” – why?

In attempting to make some Dell server BMC's more secure, I followed the recommendations given elsewhere and disabled cipher 0, using the following command (ipmitool running on the host OS, which is ...
4
votes
2answers
189 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
2
votes
1answer
32 views

IIS network scanner protection

Is there any software tool for a Windows Server (with IIS installed), where I could set up "rules" to block incoming HTTP requests with suspicious behavior? Like, say, if someone starts scanning my ...
11
votes
3answers
329 views

Suspected server or data vulnerability and reporting a fraud site

Our business is YouGotaGift.com, an online store for gift cards, two days ago someone created a website that's called YoGotaGift.com (You is missing the u), and sent a mail campaign to many people ...
1
vote
1answer
57 views

HP ProCurve Vlan Isolation

Okay, so we have an HP ProCurve Switch 2824, a Zyxel router and a bunch of 2012 R2 servers. We currently have 3 VLANs in our network: 10(Public),20(Private) and 30(Management), but we'd like to have ...
-4
votes
1answer
41 views

Is 10 character (letters and numbers mixed) password strong enough for Internet Servers? [closed]

Assuming ssh brute force attacks. Assuming the following IPTABLES configuration: DROP tcp -- anywhere anywhere tcp dpt:ssh state NEW recent: UPDATE seconds: 120 ...
0
votes
1answer
68 views

Linux glibc versions 2.18 and older - vulnerability

Server: Red Hat Enterprise Linux Server release 5.9 (Tikanga) I came to know that Linux GNU C Library (glibc) versions prior to 2.18 are vulnerable to remote code execution via a vulnerability in the ...
2
votes
3answers
538 views

Block brute-force attack using lastb and iptables

Using linux lastb command, I found that my server is brute-force attacked from many different IPs around the world! I have developed an script to detect brute-force attackers by lastb and block them ...
2
votes
2answers
66 views

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the ...
3
votes
2answers
1k views

mod_security 960015 blocks Google and other good bots

mod_security rule 960015 keeps catching Google and other good bots. I have the following in the vhost to prevent good bots from being caught: SecRule REQUEST_HEADERS:User-Agent "Mail.ru" log,allow ...
0
votes
1answer
30 views

Configure account event auditing with Secedit

I'm currently putting together a number of PS scripts which can be run against a new webserver in order to harden it prior to it being placed in production. One of these scripts will launch secedit ...
11
votes
1answer
269 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
1
vote
1answer
196 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
-1
votes
2answers
55 views

Open port to only one external IP address

I am having trouble with unwanted traffic on a certain open port and want to lock the open port so it only allows incoming traffic from One single external IP address. I have had a Google and cant ...
1
vote
1answer
206 views

Firewall Security Guidelines

I'm looking for some best practices or Security guidelines for Firewall and VPN. Trying to study a little more about network security and write a sort of decalogue (set of rules). Usefull to follow ...
5
votes
2answers
239 views

Faster, secure, protocol/code required for long-distance transfer

I've ran into a problem and I'm looking for a new secure protocol/client/server that's faster over a 1Gb/s fibre link - let me tell you the story... I have a pair of redundant, diversely-routed, ...
5
votes
4answers
308 views

How to prevent a security breach from taking your online backups with it?

What techniques do you recommend for securing a online backups (to a third party service like Mozy) a backup that has the advantages of online backup but cannot be tampered with just by compromising ...
1
vote
7answers
284 views

Security concerns on online backup

Can there be any security with online (cloud) backup? There are solutions that claim to be secure because they encrypt on client side. But there is a client on your server that has access to all your ...
2
votes
6answers
573 views

Securing against DDoS [duplicate]

My client would like to have his eCommerce (custom-made) site secured from DDoS attacks. What strategies can I implement? There are multiple forms in the purchasing flow --- searching, drilling-down ...
1
vote
3answers
99 views

what actions would you take before you expose the you internal wiki to the world wide?

I've been asked to expose our internal wiki to the world wide, which actions would you recommend me to take to secure the wiki from potential attacks? the wiki software is mindtouch. few points I ...
0
votes
1answer
128 views

How to config Squid SSL bump to let Paloalto PA series firewall recognize App-ID

A Paloalto firewall(PA-2050,POS 4.1x) was capable of recognizing the websites which users are visiting(thru http/https) then flag them with a App-ID and apply application control on the traffic, for ...
0
votes
0answers
31 views

Debian server hacked - root login on /dev/tty1 - therebel exploit [duplicate]

I have a test server running Debian Wheezy (Kernel 3.2.0-4-amd64) and OwnCloud 7. It is a virtual machine hosted on a Debian Wheezy kvm Server. It uses an own IP address configured via br0. I made ...
0
votes
1answer
37 views

How to lower security level of IE on Win 2008R2 to allow product register?

There is IE 11 installed on Win2008R2 server. After installing a Visual studio express, we are asked to register the software. A user account was created on outlook.com. However after entering login ...
-6
votes
1answer
97 views

How to secure a dedicated Linux box for e-commerce use? [closed]

My question has been asked, and I have done a lot of research. But I have yet to get a list of straight forward steps to get this done. I do not ask for an exhaustive explanation, just a really good ...
2
votes
3answers
131 views

“Mom and Pop” shop looking for advise on hosting an e-commerce site

I am not very technical, and I don't know if this is the right place to post this question. Sorry in advance. Anyways, hiring someone to do the e-commerce site can be futile, so I tried to do it ...
2
votes
2answers
281 views

PCI Compliance for average e-commerce website in the cloud

I am creating an "average" e-commerce website (using drupal and ubercart if that matters). I've read about pci compliance in the past, and that's why I'm wondering how I can see what applies to my ...
1
vote
2answers
400 views

is there any way to find out how I was hacked? What was the weak point? [duplicate]

one of my site hacked few times :( first I lost all databases, some tables were cleared and some of table's data had changed! than at the second hack, all tables were cleared and some php files' codes ...
5
votes
2answers
1k views

How to protect an SSL certificate (Apache/CentOS)

I currently use a server SSL certificate without a pass-phrase in order to allow Apache to start up unattended. There are signs from customers to require us to protect the SSL certificate more ...
-2
votes
1answer
154 views

How does Annonymous (or others) hack all of these high profile websites? What are the faults of the server admins? [closed]

In the news in the last 2 years, Anonymous/AntiSEC/etc... has been getting a lot of press for hacking high profile websites: PlayStation Network FBI CIA Bank websites Stratfor etc.... I'd like ...
4
votes
1answer
173 views

Access, Permissions, and Security for 3rd party developers

Our Marketing department wants to start hiring an outside company to assist in the development and maintenance of our marketing website. The website right now is on FreeBSD (using apache), but with ...
1
vote
1answer
76 views

How can I avoid passwords

I'm the default IT guy at a small family business. We have 5-10 employees that only work at the office for about half the year. Because of this, it's a pain to have unique passwords - so people seem ...
5
votes
3answers
361 views

What should I do if a domain controller is stolen?

If I have a Windows 2008 or 2003 domain controller in a remote office (and its own AD site) that gets stolen, what sorts of things should I do to my main network or domain (if anything) in response? ...
-1
votes
2answers
55 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
3
votes
2answers
178 views

Should laptops be put away at night?

We have a policy that everybody who leaves their laptop at the office must put it in a cupboard or cabinet when they leave for the day. To make this easier, all laptop users are also provided with ...
29
votes
5answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.