Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
93 views

Utility that sends an email when usb is unplugged [closed]

I work for large university's IT department. We manage around 500 computers in remote labs around campus and residents halls. As an on going project, we are increasing secruty in our labs through ...
0
votes
2answers
442 views

Opening common ports - does it make a network more vulnerable/susceptible to attack?

Our network admins/security admin make the case that we should keep common (external facing) ports (FTP, XMPP, IMAP, IPSEC) closed as it is a greater security risk and makes us more susceptible to ...
0
votes
3answers
321 views

Which steps to take to protect java server from cpu overload?

I've written a java server application for a software solution I'm fiddling with. The server uses multithreading to handle sockets and postgresql as a database. I'm worried about potential ...
0
votes
2answers
82 views

Security track record of unix programs [closed]

I'm looking for a database with all the noteworthy unix programs with a timeline of vulnerabilities found in that individual product in some categories (remote/local, DoS, privilege elevation, data ...
0
votes
1answer
292 views

allow a user to run command as another user without any password prompt

I'm trying to achieve same result as the answer from that existing SF question without having to enter the password for the original user, that is, I'm userA, and I want to be able to run a command as ...
0
votes
3answers
70 views

Securing data sent to an unencrypted WiFi AP

The business plan of a project I'm involved in assumes selling certain WiFi-enabled devices to end users. All these devices originally have an unencrypted connection and a standard SSID. The problem ...
0
votes
2answers
225 views

force use of specific passwords

We are migrating Active Directory from from Windows Server 2003 to 2008 shortly. With 2008 we would like to be able to use a separate password policy for a particular group of PCs. One suggested ...
0
votes
2answers
115 views

ssh - keys and password

I've gotten keys (certificates) working correctly, but as it is, it's more of a "convenience" thing. (which I love). But as far as security, someone can still use a password to login. What's a good ...
0
votes
1answer
137 views

Protect against silent1.pl Perl Script

I operate a small shared hosting area. While I notice that people are unable/struggle to exploit with PHP I have found a small minority of people using Perl in order to obtain server information. So, ...
0
votes
1answer
172 views

Questions about Domain controllers [closed]

I'm starting to work on a security project which includes setting up a domain controller for my company. I have a few questions: Do I need a proxy when having a domain controller on the network? ...
0
votes
4answers
2k views

Check for backdoors in PHP scripts

My shared host got hacked and I need to check my PHP scripts for backdoors. I'm on a dedicated server now so I can use SSH to run scripts. Are there any good scripts out there to do this task?
0
votes
3answers
120 views

Is there a way to tell if there is key stroke logging software installed? [closed]

I have a Windows-XP machine as my desktop system at work. Is there any way to tell if there is keystroke logging software running on my system or any other software that may be monitoring my system ...
0
votes
3answers
141 views

Where would I go to learn to make a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS)

Where would I go to learn to set up a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS). Note that I am not looking for a favorite choice between ...
0
votes
2answers
301 views

Why isn't this .htaccess file working?

Recently, my website was hammered with thousands of POST requests from various bots. Instead of taking the approach of blocking these bots based on their user agent, I've decided to find a way to ...
0
votes
2answers
228 views

Mysql remote encryption

I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect. 1) Is encrypting necessary? 2) Is their a built in / simple way ...
0
votes
1answer
155 views

Windows file sharing for only 1 NIC

Our Windows 2008 servers are at a Data Center. Both have 2 network cards. One card is connected to the switch that connects to the Internet the other is connected to a switch that serves only our ...
0
votes
4answers
53 views

Is there any application for handling groups and members on Linux?

I have a Linux production server. There are no simple codes for viewing groups, members, how many groups one member is part of etc etc. Is there any good and secure application for this? Thanks
0
votes
3answers
289 views

May the file size returned by stat be compromised?

I want to make sure that nobody changed a file. In order to accomplish that, I want not only to check MD5 sum of the file, but also check its size, since as far as I understand this additional simple ...
0
votes
2answers
3k views

How do I hide the version of Linux from a port scan?

How do I hide version of Linux I am running when I scan server ports? When I nmap'ed (nmap -A -T4 192.168.40.12) the server's ip from the outside, this is the result: Starting Nmap 4.62 ( ...
0
votes
2answers
1k views

How to configure mysql to connect via sockets?

My mysql server is installed on the localhost machine where my php scripts are stored. So is what they say right that it's safer to connect to mysql from php that is placed in the same server? If so, ...
0
votes
3answers
5k views

Windows Server 2003 - “The security log on this system is full.” message when logging in

When I remote desktop into one Windows Server 2003 machine, I get a popup message saying "The security log on this system is full." When I open the Event Viewer, the security log size is 512.0 KB, ...
0
votes
6answers
408 views

What is the risk of introducing non standard image machines to a corporate environment

I’m after some feedback from those in the managed desktop or network security space on the risks of introducing machines that are not built on a standard desktop image into a large corporate ...
0
votes
2answers
27 views

How safe is IPtables whitelisting?

I am deploying some VPS and of course, security is a big concern. I read that IPtables whitelisting is the best way to safeguard your machine. So I set up the follwing : echo "Flushing rules" ...
0
votes
2answers
57 views

block ip with iptables ubuntu server

I am trying to block one IP with iptables in my Ubuntu server 12.04. The foreign IP is 117.16.18.95.dyna. You can take a look at the next image: I have added this ip to iptables with the next ...
0
votes
1answer
63 views

Should I use amazon VPC or EC2 in this scenario?

My application is a SAAS that leverages amazon web services. Currently, the application is ending development and my company received its first client. My application users are required to upload word ...
0
votes
1answer
25 views

How to *securely* install MongoDB from its official repository?

The official MongoDB guide suggests that I add a .repo with gpgcheck=0 over HTTP protocol. I'm getting the feeling that this is a very insecure setup - I am worried about exposing myself to MiTM ...
0
votes
2answers
397 views

kadmin cannot list principals “requires list privileges”

I can authenticate fine via kadmin however cannot list principals? [root@server ~]# kadmin -p admin Authenticating as principal admin with password. Password for admin@org.domain.com: kadmin: ...
0
votes
1answer
99 views

Block file browsing on Windows Explorer

I have a Citrix application that open Windows Explorer from a menu. The command invoked to open Explorer is: Explorer "g:\app\folder" What happens when Explorer is opened is that it shows a window ...
0
votes
1answer
115 views

Linux glibc versions 2.18 and older - vulnerability

Server: Red Hat Enterprise Linux Server release 5.9 (Tikanga) I came to know that Linux GNU C Library (glibc) versions prior to 2.18 are vulnerable to remote code execution via a vulnerability in the ...
0
votes
2answers
2k views

Can't update to latest PHP version. Centos 7 [closed]

I'm unable to update to the latest PHP package. I ran yum update php and it updated to PHP 5.4.16. Reran the update command to see if there was any newer versions and stated there was no packages ...
0
votes
1answer
43 views

OpenSSL certificates

Since the recent surfacing of the heartbleed exploit, I have become curious as to how long openssl certificates are usually kept before they are regenerated? Is it days, weeks, months, years? I can't ...
0
votes
2answers
231 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
3answers
110 views

benefits of iptables on VPS? [duplicate]

Say I have a well updated Linux VPS serving HTTP content on port 80 using apache. What would I gain by enabling IPtables? I can see no obscurity gains since the machine has a port open. Also, since ...
0
votes
1answer
103 views

An account failed to log on Message on Windows 2008 R2

I'm having hundreds of messages in my Security Event System like: An account failed to log on. Failure Reason: Unknown user name or bad password. Caller Process Name: ...
0
votes
1answer
151 views

A ghost process started automatically and drains CPU [duplicate]

I am running an Ubuntu virtual machine that has few sites installed on it. I think due to my error and wrong permissions a malicious code was uploaded on the server and the "worm" had root access for ...
0
votes
3answers
222 views

How to use `rsync` to securely push to a mirror?

I am using rsync --rsh "ssh" to push to a mirror. Setting the necessary file system permissions on the mirror requires rsync to run with root privileges on the mirror. However, the mirrored files ...
0
votes
1answer
237 views

How open ports in INPUT chain, only for a target IP, with iptables?

I have a server Debian 7 Wheezy, with 2 assigned IPs. I have different service on different port assigned to the IPs. How can i set iptables rule, to work only with one of IP? Example: I Have 2 IPs: ...
0
votes
2answers
73 views

How can i make my all webistes only accessible by browsers and not auto scripts

I have that my websites have been hacked by some auto running libwww-perl BOT/0.1 (BOT for JCE) and Gecko/20100101 Is there any way that my all websites are only avaiable to genuine browsers and not ...
0
votes
2answers
75 views

How Do I Defend WebEx Security?

My company is an ISV selling software to banks and credit unions. We provide customer support via WebEx but every once in a while we'll have a customer that won't open their firewall to the WebEx ...
0
votes
2answers
703 views

Does open_basedir works recursive?

Does open_basedir works recursive? For example if I write in php.ini something like: open_basedir=/client3/web3/web Does it include all directories in /client3/web3/web (/client3/web3/web/1, ...
0
votes
2answers
46 views

Should my database server offer SSL?

I was installing a renewed SSL cert on my web servers and noticed that my DB server doesn't have one set up, which got me wondering: Should my database server only accept connections via SSL? The ...
0
votes
2answers
537 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
3answers
99 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
0
votes
2answers
120 views

Should I be concerned with seeing this in my logs?

The following requests (this is about half of them) in my Nginx access log have all come over the span of a few minutes from an IP that is registered to an ISP in Vietnam (I could provide the IP, but ...
0
votes
1answer
366 views

How to block an IP, if it is making many http/apache/mysql requests in a second?

If some one tried force burst attack on my website, how can i block their IP address? I mean, I want to block an IP if I am getting many http/Apache/SQL requests per second from it. How can i prevent ...
0
votes
3answers
8k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
0
votes
2answers
15k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
1answer
129 views

Microsoft Security Compliance Manager terms

Recently i have installed Microsoft Security Compliance Manager. But i am confused with some terms. As per the print-screen ( which is mark in Red-Colour Round ) 1st - the 'Default' here means the ...
0
votes
3answers
568 views

I think I'm under DoS attack. How can I respond?

My server's CPU has been spiking out for the past few days, to the point that it drops requests. I've been looking through the logs, and see certain IP's in the logs that are just simply downloading ...
0
votes
1answer
167 views

ssyn.c and slow.c used on my VPS [duplicate]

I have noticed some changes on VPS Debian Squeeze and looked with history to see what commands were run. Then I found some which I'm 100% sure I didn't run because I don't know what are they. Somebody ...