Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
250 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...
2
votes
1answer
23 views

What is the best way to isolate permissions to a role, where traditionally role-based security is not implemented?

The particular example I'm pursuing here is a having a deployment officer role. Typically, this would be performed by one particular employee, but that employee can get sick, fired, go on vacation, ...
0
votes
1answer
26 views

How to I assign OWNER RIGHTS permissions to a file in Windows 7?

When I run ICACLS on a file, it returned: foobar.LDF OWNER RIGHTS:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) What securityid do I pass to icacls to assign to the generic user ...
0
votes
0answers
12 views

give serverprincipalname read write permissions to security group members

What are the settings for the group to make the following change? I need to create a group that can be used to grant: serviceprincipalname SELF Read serviceprincipalname SELF Write to its members. ...
2
votes
1answer
44 views

Use VPS provider's kernel or maintain my own?

I've got a Debian Wheezy VM on Linode and they run it with their own kernel. As a reputable company, I'm sure they're quick to apply security patches, and all I need to do is reboot to get the new ...
0
votes
0answers
12 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
1answer
33 views

I guess that my mail server is unprotected and spammers are using my mail server to spam myself [duplicate]

Since I switch to my own mail server (I folowed this two tutorials: https://www.linode.com/docs/email/postfix/email-with-postfix-dovecot-and-mysql and ...
4
votes
4answers
79k views

Windows Security (In windows 7) keeps asking for my credentials, and won't “Remember my credentials”

I'm not the network admin, but my network admin is having trouble solving this as well. My issue is exactly as the title says... Windows Security (In windows 7) keeps asking for my credentials, and ...
1
vote
2answers
148 views

What hotfixes should be applied to a ColdFusion 8 Server

I've recently inherited a server running ColdFusion 8 and believe it may not have been patched for security updates (as per http://www.adobe.com/support/security/#coldfusion) for quite some time. The ...
2
votes
1answer
140 views

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to ...
35
votes
12answers
8k views

What do you do about staff and personal laptops?

Today, one of our developers had his laptop stolen from his house. Apparently, he had a full svn checkout of the company's source code, as well as a full copy of the SQL database. This is one ...
0
votes
0answers
22 views

Is it possible to break out of a “trap 1 2 3” secured terminal session by using SIGSEGV?

The title says it mostly. I'm auditing the security of a terminal-based application on AIX, and the way you use it is to connect to it remotely through telnet, where the ".profile" of the telnet user ...
0
votes
1answer
117 views

snort complains on local.rules

I just installed snort-2.9.7.0 on Fedora 20, and am getting error when running: % snort -c /etc/snort/snort.conf --dump-dynamic-rules=/tmp Running in Rule Dump mode --== Initializing Snort ...
1
vote
0answers
21 views

WebRTC Public Kiosk Security Model

I am diving into WebRTC to make a basic one-to-one video/audio connection between two endpoints. I am now struggling to determine what would be an advisable security model in the following situation: ...
1
vote
5answers
117 views

How to get an early warning to someone logging into a server

I like to be notified when someone is logged into one of my Linux servers, and also be able to find out what the location of the login attempt. How can I do this?
5
votes
2answers
4k views

Custom fail2ban Filter for phpMyadmin bruteforce attempts

In my quest to block excessive failed phpMyAdmin login attempts with fail2ban, I've created a script that logs said failed attempts to a file: /var/log/phpmyadmin_auth.log Custom log The format of ...
2
votes
2answers
952 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
2
votes
2answers
1k views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
0
votes
2answers
290 views

What is the risk of opening network port?

What can someone do if i write a program to open a TCP port and run, lets say an echo server? Can some one access data on my system? or any other risk of opening port?
-1
votes
1answer
45 views

Compiling nginx and php

Im about to set up a basic web server based on ubuntu server 14.04 x64 with an online shop section, the server will also consist mysql, mail, and maybe other servers as well until it runs smoothly. ...
3
votes
4answers
916 views

Asterisk Intrusion Prevention

Let me start of by saying that I'm a noob, and what I've figured out so far has only been by stumbling my way through it. I have Googled around and the solution may be out there already, but it was ...
6
votes
2answers
546 views

Set windows permissions to allow modify, but not execute

Is it possible to set permissions on a folder in Windows (Server 2003 64bit) so that an account can write and modify, but not execute? If I set modify permissions, windows seems to insist I also set ...
0
votes
3answers
2k views

Problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista

I'm having some problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista. My client requires this exact version. The system on which I'm installing the software is recently ...
0
votes
1answer
423 views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
3
votes
1answer
207 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
6
votes
2answers
3k views

How To limit Nginx Auth_Basic re-tries?

I have protected a web folder with Nginx's Auth_Basic module. The problem is, we can try several passwords until it works (brute force attacks). Is there a way to limit the number of failed re-tries?
17
votes
10answers
14k views

Live view of Linux shell commands executed by another user?

Is it possible for the root user in Linux to have a real-time (or close to real-time) view of the shell commands being run by another user logged in via a terminal or SSH? Obviously they're stored in ...
2
votes
2answers
5k views

ntrights equivalent/replacement for Server 2008

Does anyone know what or if there exists a replacement utility for the Server 2000/Server 2003 command line tool ntrights on Server 2008? More info on this utility (for those that don't know what it ...
4
votes
2answers
4k views

Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790

I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
1
vote
5answers
327 views

How do you secure the “gallery” photo gallery?

Are there any special steps that should be taken to secure Gallery? Specifically, I currently have the Fedora RPM gallery2-2.3-1.fc8 installed. I do have selinux enabled in targeted mode, which is a ...
4
votes
2answers
754 views

Updating snort rules automatically

I've been working on getting my snort machine up and running, and working through Snort IDS and IPS Toolkit. The authors suggest using Oinkmaster, but on that website, the last update was February ...
73
votes
19answers
15k views

Why should I firewall servers?

PLEASE NOTE: I'm not interested in making this into a flame war! I understand that many people have strongly-held beliefs about this subject, in no small part because they've put a lot of effort into ...
1
vote
0answers
169 views

OpenVAS 7 failing to SSH into a test server

My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5. When I run SSH Authorization Test I get the following ...
-1
votes
1answer
45 views

I see a flood of requests from Revista22

In many of the sites I am running I see in Google Analytics thousands of visits referred from a site called revista22.ro, which I don't know and which mentions nothing about any of my sites. Also, I ...
0
votes
2answers
73 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
2answers
1k views

Filezilla or PuTTY: I have “Access granted” followed by “Server unexpectedly closed network connection”. How to troubleshoot?

Here is an extract of Filezilla debug traces : Offered public key from "(...)" Offer of public key accepted, trying to authenticate using it. Access granted Server unexpectedly closed network ...
4
votes
4answers
500 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
0answers
13 views

Securing web application used for core business process

I am writing an application which will be used for our core business workflows (client registration and management etc). I have partners and employees who are spread across the globe, so I want to ...
0
votes
0answers
52 views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
-6
votes
1answer
60 views

how does one report an RDP attack to Microsoft when it's happening in real time?

To my surprise, Security Event 10 was for 104.43.193.6 which is apparently a Microsoft ip address: http://ip2location.com/demo/104.43.193.6 =. Microsoft Corporation. Likely AFAIK some has leased ...
0
votes
0answers
40 views

IIS App cannot write to network share on a 2012 server, fine on a 2008 server

I have a Windows 2008 R2 web server running IIS, and the app needs to write files to a folder. None of the machines are on a domain, just a local workgroup. The app pool is running as the user ...
6
votes
13answers
8k views

Relatively easy way to block all traffic from a specific country?

I know this sounds terrible, but I have a web app that has no users in the Philippines, but is constantly bombarded by spammers, carders testing cards, and other BS from there. I can see in the logs ...
3
votes
1answer
2k views

Setting the secure flag on cookies from Outlook Web Access

I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
0
votes
1answer
31 views

Modify the Windows failed logon message

Is there a way to modify the message that the user sees following the entry of an insecure password, whilst changing/resetting their password, on Windows 7 / 2008 Server machines? Basically, the ...
1
vote
8answers
3k views

No success when trying to upgrade glibc on RHEL4 due to GHOST

Due to the recent GHOST vulnerability I was trying to upgrade the glibc version on our RHEL4. The command I tried using was: rpm -Uvh glibc-2.3.4-2.57.x86_64.rpm Result was: [root@rhel4-test ~]# ...
0
votes
3answers
352 views

DDoS Network Protection Devices

In our office we're running a Cisco ASA 5510 firewall. Is this device enough if we want to protect against DDoS attacks? What devices (like cisco guard, etc) do you recommend and what's the user ...
-1
votes
1answer
40 views

Un-Noticed Vulnerability, I need to know if i should do anything

Possible Web-Site Vulnerability. I'm not sure if this is the right place to ask this, but I am running my own website, that is still currently being developed, but since it is 'Open as Beta' it is ...
4
votes
4answers
237 views

Securing elasticsearch

There appears to be a serious lack of information on this despite the fact that as installed elasticsearch is extremely exploitable. My main fear in using it is that as a non-expert I have no idea ...
1
vote
2answers
100 views

Copying data between AWS EC2 machines

There are times where, in order to do some debugging or perhaps a manual migration, I need to copy large chunks of data from one EC2 instance to another. When the size of the data is tiny, it's simple ...
1
vote
2answers
37 views

Why is this server generating outbound IRC connections? [duplicate]

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but ...