Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
350 views

Security and Windows Login

I'm not entirely sure this is the right place for the is question but I cannot think of another so here goes. In order to login to the windows machines at my office one must press the almighty ...
0
votes
3answers
266 views

What security precautions and configurations are needed for a production web server?

I am standing up a win server 2008R2 x64 and will be hosting a few public facing websites with IIS 7.5. I am relatively new to administering a production web server and am curious as to what ...
0
votes
2answers
102 views

Prevent UID=0 to be assigned to any other user in Linux

I wanted to know if there is a way to prevent the assignment of UID=0 to any other account other than root.
0
votes
2answers
222 views

Make https the default

I have my domain and hosting setup to use https, and no normal http. The only thing I use this for is webmail, and so I don't even want to offer normal http. At the moment, I have to manually go to ...
0
votes
5answers
575 views

Capistrano security

We are using Capistrano in some systems as a deploy system. The new sysadmin we have says that our setup is really dangerous and I would like to know how to fix it. We have a deploy user called "foo" ...
0
votes
6answers
2k views

how to check for sniffers in Ubuntu?

Somebody is accusing me that my linux ubuntu machine could be the source for a server attack. Their technique was replacing the original ssh by this patched ssh and, as such eliminated all ...
0
votes
3answers
113 views

What % of IT shops (if any) disallow Flash on their corporate desktops?

My company is considering rolling out a desktop windows application with a dependency on Flash (swf.) The product manager is concerned that IT/IS/ops shops might have a policy of not allowing flash ...
0
votes
3answers
3k views

What is the best way to setup a public and private wireless access point on the same home network? [closed]

For my home network (with internet provided from a cable modem) I would like to setup a secure wireless access point that I use for all of my personal connections (home PC, iPhone, Xbox, etc) and also ...
0
votes
3answers
70 views

Is it generally a bad idea to have other types of virtual appliances installed along side a firewall appliance?

I want to run my Firewall/NAT software (pfsense) and an internal NAS (looking at freenas right now) for my SOHO on one machine. Right now I have them separated on two different machines, but I'd like ...
0
votes
2answers
5k views

nginx restrict directory access

I have a Wordpress site running on nginx. What is the best way to restrict access to /wp-admin using nginx? Thanks
0
votes
6answers
106 views

Combining IntrAnet and HTTPS, is it useful?

I have a web server which supports only the company's Intr*a*net, not the external Int*er*net. There will be about 100 different users who will connect to a web application on this server and they ...
0
votes
4answers
3k views

Securing Guest Wireless Network

I need to setup a guest wireless network at the office for visitors to connect to. What are your recommendations in terms of how to secure it without putting too much of a support burden on myself? ...
0
votes
3answers
20k views

How to automatically set IE settings for all users?

I need to alter some settings on Internet Explorer (version 7, but potentially some users may still have version 6). Doing this manually is fine, change settings, restart IE, done. However, we have ...
0
votes
3answers
114 views

Monitor communication to outside the network

I work at a place where they have access to very sensitive data and think a lot about security. I dont want to ask bc they may lie, is there software to monitor data such as email (pop/imap AND ...
0
votes
2answers
4k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
0
votes
6answers
4k views

software version of the RSA SecurID?

Is there a software version of the securID fob below: I remember reading that the algorithm for the key generation had been broken & that there was a software utility available, where if you ...
0
votes
3answers
46 views

Security concerns with enabling PowerShell on a production server [on hold]

I work in the software development side of an ISV. We're thinking of using PowerShell for some utilities in and around the core application (which itself is ASP.NET). One of my colleagues said to me ...
0
votes
2answers
453 views

Arp attack on my network

We have a small network of around 100 laptop/desktops and around 20 servers (sounds an overkill but these servers provide service for all our external contractors too) and we have recently noticed ...
0
votes
2answers
74 views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
0
votes
2answers
44 views

How can I sync servers configurations

I'm looking for a way for 1 server lcoated in Switzerland (acting as a web/db server) to share/sync files like deny.hosts and iptables rules to my other server (dns/mail) located in North America in a ...
0
votes
3answers
180 views

Is it a good idea to only allows connections to be established in the LAN->DMZ direction?

I'm trying to setup the usual thing, with a DMZ containing servers that can be accessed from the internet, and a LAN that should be as secure as possible. I happen to also have total freedom on the ...
0
votes
1answer
133 views

Is the following setuid program a security risk?

I have the following program in .c set as setuid chmod only read/execute by owner and will set it immutable, as i will the php script it invokes. #include <stdio.h> #include <stdlib.h> ...
0
votes
2answers
1k views

Trying to set up virtual hosts to block access by IP, for three domains and when using SSL on one domain

So I want all this on one server: - 3 domains / websites - SSL on one of them - nothing to be accessed by an IP address (e.g. 'domain.com' is okay, but not by just typing '123.55.44.123' into the ...
0
votes
3answers
227 views

VPS security considerations when only accessing from one IP [duplicate]

I'm running an VPS where I have deployed some projects. As I am the only person who accesses the server and I furthermore have a fixed IP i decided to configure iptables so that server access is only ...
0
votes
2answers
209 views

Webhosting on virtual sever vs physical server: Security vulnerability

In comparison to a physical server, is there any special security vulnerability in virtual servers for purpose of hosting several websites? For example, can the fact that there is not any hardware ...
0
votes
2answers
112 views

How do you restrict access to a server to be from a single machine (which doesn't have a dedicated IP)?

We want to deploy a J2EE WAR file from a build server to an application server (running JBoss 7.1.1) using the JBoss management console. Each machine is located on a different network. On the build ...
0
votes
2answers
340 views

What is the best way to configure Postfix to send mail only on a production server?

I'm digging the web around to find the best way to configure Postfix. I don't want to install a full Postfix server, the only thing I want is to send mail with the PHP mail(). I know this can be ...
0
votes
2answers
105 views

Why would a URL ending in .com be a security threat? [closed]

I have a WordPress website hosted on Pagely. When I searched for a string ending in .com, it triggered a security threat warning and my site was blocked. I raised an issue, but I got the following ...
0
votes
1answer
126 views

How to connect to a SINGLE colocated server - is StrongSWAN sufficient?

I am thinking of colocating a SuperMicro 1022G-URF (16-way 1u server, 16 GB RAM) at a "place that does server colocation. I am running CentOS 6. The server will be a web server and an email server ...
0
votes
4answers
633 views

Disable CentOS users from everything but samba use.

I have a storage server running some samba shares. I need to create multiple users for each individual working at my company, but I only want them to be able to access samba from the client machines. ...
0
votes
2answers
127 views

Scan POP3 mail accounts for suspicious activity

Is there a way to scan POP3 e-mails for certain domains / keywords assuming user/passwords are known? Our company would like the ability to know if suspicious e-mails are being sent, such as e-mails ...
0
votes
1answer
1k views

Anti-Malware Antivirus for Linux Web Server? [closed]

Does anyone have experience running anti-virus software on a Linux web server, especially CentOS, and what do you recommend? I'm interested in putting it on a web server we have as one more method ...
0
votes
2answers
108 views

Immortal application

(TL;DR: last paragraph) I'm running an online service and have thusfar been doing offline backups and simple monitoring to achieve resilience and availability. Resilience is rather manual but I'm ...
0
votes
2answers
280 views

Active directory auth to comprimised machine?

Let's say that I have a machine on my domain that has been compromised by an unknown attacker. If I use my domain credentials to log into that machine remotely, via RDP, does that expose my ...
0
votes
2answers
339 views

Possible DNS Injection and/or SSL hijack?

So if I go to my site without indicating the protocol, I'm taken to: http://example.org/test.php But if I go directly to: https://example.org/test.php I get a 404 back. If I go to just: ...
0
votes
3answers
91 views

Restricting access to a video file on the network

I have an MP4 file on our Windows 2008R2 fileserver that I want people to be able to view, but not to create copies of. Is there a security permission configuration that would allow this?
0
votes
1answer
179 views

Is this considered 2 Factor Authentication?

Trying to create a 2 Factor Authentication for users to access data remotely. Here my scenario: We have a Watchguard to VPN into the network - If we use it's internal DB to store authentication ...
0
votes
2answers
310 views

www-data user can read /etc/fstab

I'm pretty new at this. So I figured out that apache2 starts processes as www-data user. Suppose this user then starts untrusted code. What if I wanted to disallow this user to read any files (like ...
0
votes
2answers
1k views

Worried that my webserver has been hacked (or compromised) with redirects to 'guide-securesoft.ru' [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY So I am very panicked. I have a Rails application I am building hosted on a VPS for a staging environment. I configured it ...
0
votes
1answer
92 views

Utility that sends an email when usb is unplugged [closed]

I work for large university's IT department. We manage around 500 computers in remote labs around campus and residents halls. As an on going project, we are increasing secruty in our labs through ...
0
votes
2answers
395 views

Opening common ports - does it make a network more vulnerable/susceptible to attack?

Our network admins/security admin make the case that we should keep common (external facing) ports (FTP, XMPP, IMAP, IPSEC) closed as it is a greater security risk and makes us more susceptible to ...
0
votes
3answers
280 views

Which steps to take to protect java server from cpu overload?

I've written a java server application for a software solution I'm fiddling with. The server uses multithreading to handle sockets and postgresql as a database. I'm worried about potential ...
0
votes
2answers
81 views

Security track record of unix programs [closed]

I'm looking for a database with all the noteworthy unix programs with a timeline of vulnerabilities found in that individual product in some categories (remote/local, DoS, privilege elevation, data ...
0
votes
1answer
272 views

allow a user to run command as another user without any password prompt

I'm trying to achieve same result as the answer from that existing SF question without having to enter the password for the original user, that is, I'm userA, and I want to be able to run a command as ...
0
votes
3answers
70 views

Securing data sent to an unencrypted WiFi AP

The business plan of a project I'm involved in assumes selling certain WiFi-enabled devices to end users. All these devices originally have an unencrypted connection and a standard SSID. The problem ...
0
votes
2answers
224 views

force use of specific passwords

We are migrating Active Directory from from Windows Server 2003 to 2008 shortly. With 2008 we would like to be able to use a separate password policy for a particular group of PCs. One suggested ...
0
votes
2answers
112 views

ssh - keys and password

I've gotten keys (certificates) working correctly, but as it is, it's more of a "convenience" thing. (which I love). But as far as security, someone can still use a password to login. What's a good ...
0
votes
1answer
136 views

Protect against silent1.pl Perl Script

I operate a small shared hosting area. While I notice that people are unable/struggle to exploit with PHP I have found a small minority of people using Perl in order to obtain server information. So, ...
0
votes
1answer
171 views

Questions about Domain controllers [closed]

I'm starting to work on a security project which includes setting up a domain controller for my company. I have a few questions: Do I need a proxy when having a domain controller on the network? ...
0
votes
4answers
1k views

Check for backdoors in PHP scripts

My shared host got hacked and I need to check my PHP scripts for backdoors. I'm on a dedicated server now so I can use SSH to run scripts. Are there any good scripts out there to do this task?