Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
1answer
75 views

Card Reader and Software

I am looking for a card-reader solution that includes not only the physical card-reader but a method to read/program the cards. The end goal is have to give my end users a card-reader and then an ...
1
vote
4answers
127 views

Security and Protection for Win Server 2003

Is there any Security software recommendation for Windows Server 2003 as a Web Application/Website server? Or any particular settings I should adjust before making a website to be Live.
1
vote
2answers
15k views

Event 4625 Audit Failure NULL SID failed network logons

In 3 separate systems, the following event is being logged many times (between 30 to 4,000 times a day depending on the system) on the domain controller server: An account failed to log on. Subject: ...
0
votes
4answers
504 views

Removing malicious scripts

I unfortunately found today that I have a malicious script on my website. It is chmodded 644, but I cannot delete it. Directories above it would permit me to delete it normally. The interface is ...
0
votes
3answers
2k views

What are the minimal iptables rules to surf the internet? [closed]

I am trying to set minimal rules to my Linux iptables rules file to just be able to surf the internet. Here what I did: * filter -A OUTPUT -p tcp --dport 80 -j ACCEPT -A OUTPUT -p tcp --dport 443 ...
0
votes
4answers
134 views

Preventing programmer from copying information

Is there a way to block files, coding, etc. from being copied when giving a new programmer ftp access to do research prior to submitting a quote?
0
votes
8answers
583 views

Basic questions about running a web server

I'd like to run a web server to experiment with. I'm going to to use Mongoose because it looks lightweight and simple enough to understand everything that it is doing. I have a Debian box to run it ...
0
votes
7answers
2k views

How to protect myself from promiscuous mode?

I have read that some network adapters can switch to promiscuous mode and get all the packets sent by my router. We have multiple computers here connected to the same router. They all have the WEP ...
0
votes
3answers
77 views

Letting tenants host their own data [closed]

We are developing a web app and planning to deploy it in a multi-tenant model. However, some of our potential customers are having a great deal of discomfort with the idea of not having the control ...
0
votes
2answers
189 views

Is this script nefarious?

This is sitting in my web site's cgi-bin. Should I be concerned about it? #!/usr/bin/perl print <<HTML; Content-type: text/html <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 ...
0
votes
4answers
312 views

New system administrator - Any security suggestions? [closed]

We hired a new system administrator and this will be the first time delegating this sensitive task to a third person. He's a good guy but we are still wondering about security. What do you recommend ...
0
votes
4answers
3k views

What Linux server distro is best for a dedicated webserver and a file server? [closed]

I just wanted to know which Linux server distro is most compatible/stable for a dedicated Web Server and a separate dedicated File server. And also please suggest me for a file server what would be ...
0
votes
4answers
323 views

Security policy: servers without root/administrator password

I am considering running public web and application servers with blank root/Administrator passwords, and I'm wondering whether this might be a bad policy. I see several advantages of having no ...
0
votes
5answers
333 views

Is blocking all traffic to MySql port, EXCEPT from own server IP, a good security measure?

As the title says, would this help? Imagine a classifieds website, where users simply login, logout, post classifieds, delete classifieds etc... All with PHP and mysql. I have my own server, with ...
0
votes
7answers
351 views

Can databases alone host a hack?

I was hacked recently. The hack seems to redirect any site on my server to a fake virus site. So I deleted all my website files and the hack seemed to go away. About a week later, it's back -- the ...
0
votes
2answers
4k views

Managing /tmp and /var/tmp, and why not globally writeable?

Ive been trying to lock some security vulnerabilities at my server, and I got to the point of the tmp folders. Both of them will store files that are used by other resources, still, reading a little ...
0
votes
3answers
148 views

Can an attacker remotely abuse a Windows 2008 server if he knows the username/password of a user included into “Users” group only?

There's a Windows 2008 server where there's a local user account with a known password - let it be user "dummy" and password "dummy1". That local user only belongs to "Users" group. The attacker has ...
0
votes
2answers
113 views

last night, my server was doing something intensive with the hard drive

I have an ubuntu server running in my bedroom. It's connected to the internet. Last night, at 5am, it was doing some intensive i/o with the hard drive (I heard it) for like 20 minutes. I don't have ...
0
votes
4answers
1k views

Unexpected requests from an IP in San Antonio.. should I worry?

I've noticed on my server log that I receive unexpected requests from an IP in San Antonio. Is this spam ? They visit phpMyAdmin, admin.. etc is this spam ? 184.106.130.137 184.106.149.110 - ...
0
votes
2answers
453 views

One-App SSH Logins using login shell?

I want to run an application on a Linux machine which will be accessed by most users using PuTTY. I want to start that app and, when it's done, I want it to end the SSH session. Is it ...
0
votes
3answers
1k views

Why do we really need apache + php if php can run as web server?

A few months ago i did an experiment that kinda went out very well, today we have an intranet portal using the following technologies: JeasyUI phpgrid Kibana So, based on our tests why do we need ...
0
votes
1answer
586 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
3answers
594 views

Have I just been under attack?

I have set up my Debian server on HP ProLiant 360 G4 yesterday. I started off with minimum services, running only SSH and Apache, all on standard ports with default configurations. About an hour ago, ...
0
votes
2answers
6k views

Allow any arguments for a given command with sudo [closed]

I have the following sudo config entry which I added via sudo visudo: mark ALL = NOPASSWD: /usr/bin/lxc-ls* I can run lxc-ls with my user fine but I can't append any parameters without it demanding ...
0
votes
4answers
77 views

Detecting if a page has been requested more than a specified no. of times by the same IP and blocking the IP

I'm trying to detect bad bot activity. If the information.php, which is disallowed in robots.txt but is open for normal users, has been requested more than 500 times in a day by same IP address, I'd ...
0
votes
2answers
444 views

What is the risk of opening network port?

What can someone do if i write a program to open a TCP port and run, lets say an echo server? Can some one access data on my system? or any other risk of opening port?
0
votes
4answers
4k views

how to protect telnet access to smtp port 25?

Please consider the following: 192-168-1-106:~ michael$ telnet <remote_server_ip> 25 Trying <remote_server_ip>... Connected to li*****.linode.com. Escape character is '^]'. 220 ...
0
votes
2answers
360 views

Linux - Block ssh users from accessing other machines on the network

I have set up a virtual machine on my network for uni project development. I have 6 team members and I don't want them to SSH in and start sniffing my network traffic. I already have set the firewall ...
0
votes
3answers
94 views

What is the rules of ports?

I mean the port to connecting.. just like SSH port, nginx port, etc. Im not clear about the port. So far I can see port running not more than 5 characters (port xxxxx). So, when choosing port ...
0
votes
4answers
3k views

What firewall rules should be used for a home based system [closed]

I'm just setting up a home wireless network with connection to the internet. The router has settings to configure the firewall rules. Currently it's set to INBOUND ALL ANY and OUTBOUND ALL ANY. ...
0
votes
4answers
1k views

Permissions set to 555. How can another user modify the files? [duplicate]

I run an Ubuntu 12.04 x64 VPS with Vesta, and a site in PHP. It has been hacked several times with injected code that looks like this: <?php ...
0
votes
5answers
713 views

Should I change the SSH port to < 1024? [duplicate]

Many server configuration guides recommend that the SSH port should be changed to something > 1024, for obscurity and to avoid conflicts. This is interesting, because it recommends using a port < ...
0
votes
3answers
110 views

Company server setup - security and ssh

I currently manage a server at RackSpace for my company, and am planing on switching to Linode in the next month or so, for a better server and to save some money. In the process of switching, I am ...
0
votes
3answers
91 views

What could be using an HTTP request method of “-”

Got an apache log entry that looks like this, actually I have a bunch of them spread out over time. XXX.XXX.XXX.XXX - - [27/Apr/2012:14:39:52 -0500] "-" 408 - "-" "-" It wasn't a GET or POST, the ...
0
votes
4answers
142 views

SSH: what is the best way to achieve secure connection with dynamic IP?

I'd like to have my own distant server, and to connect to it through SSH. But I'd like to do it through many PCs (i.e. many different IPs), do you have any advice / secure solution for doing this?
0
votes
1answer
2k views

How to create dummy user?

I want to create user with least privileges. Without home, without rights, without shell. How to do that? When I call useradd it creates user with home
0
votes
2answers
156 views

Connecting to a malicious VPN

I am connecting to a VPN that is known to be malicious. Numerous machines on the network including the VPN server its self are all compromised. What precautions should I take to protect myself?
0
votes
5answers
225 views

Have opened a port. Is my server vulnerable?

I have two dedicated servers. One which stores all the files (scripting) and the other hosts just the db. In order to connect to the other server I have enabled port 2335 on TCP/IP and added the ...
0
votes
4answers
300 views

IP Masquerading - is it just for email?

For some reason I thought it was a security feature of Ubuntu. Is there anything security related pertaining to it?
0
votes
3answers
1k views

Is it dangerous to allow every user to run nmap as root?

At our university we have some computers in the "networking lab", that are configured to allow everybody to run nmap as root via /etc/sudoers. Could this be a security vulnerability?
0
votes
9answers
321 views

Is it possible for large ISPs to give you the range of IPs you can be assigned?

My company is trying to sign up for LexisNexis services. LexisNexis (or more specifically, a service offered by LexisNexis) restricts logins to either a handful of IPs, or a range of IPs. We just have ...
0
votes
3answers
495 views

How do I tell if my mail system has been compromised?

My webmaster catch-all email address started receiving a lot of "Delivery Status Notification (Failure)" replies from various email systems. In the order of 1 per hour. It's obviously Spam being ...
0
votes
3answers
30k views

Port 22 is closed even with Firewall turned off [closed]

I'm trying to open port 22 on my local machine (Windows 7 32 bit). I'm using a web tool to check if my port is open. It says that port 22 is closed. So I disabled firewall to see if it causes port to ...
0
votes
3answers
121 views

Help on securing WIndows

I have 2 systems running MSWindows Server 2003 and 2008 respectively. I have done all the updates. I am interested in securing them e.g. close all unneeded services. For example my concern is that if ...
0
votes
2answers
4k views

How do proxy servers filter https websites?

With my limited knowledge of HTTPS I started wondering: How do proxy servers filter HTTPS websites? I mean adding a proxy server is essentially a MITM attack which is what HTTPS was explicitly ...
0
votes
3answers
502 views

How to protect a local NTFS folder so only it's owner can access (i.e. not a local / domain admin)

What i'd like to do is to set up such folder permissions so the folder can be accessed only by a user who created it (or one, who knows his password). Is it possible? Is it secure? I tried to set ...
0
votes
4answers
289 views

Security holes in in PHP 5.2.5

My shared hosting provider uses PHP 5.2.5, which was released at the end of 2007. I would like to know the security holes of PHP 5.2.5. Where I can get them? phpinfo
0
votes
6answers
475 views

Secure data transfer from a RHEL 5 box

I have been researching this for a while but cant find and conclusive answeres. FTP - Very insecure. FTP over SSl - Not fully supported everywhere, only a few clients support it? SFTP - This is the ...
0
votes
3answers
5k views

Better way to stop/start Webmin and SSH

it would be a good idea to not have webmin running all the time... just start it via ssh when I need it... so, I just stop webmin,and leaving SSH always running... when I need to access webmin, I ...
0
votes
1answer
81 views

Why are some big corporations still worried about cloud security? [closed]

My company sells an app subscription, which is hosted as SAAS on Amazon Cloud. I have had a few clients who weren't very keen on uploading their documents to my product because my product is hosted ...