Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
88 views

Is it possibel to get that “Padlock” symbol in the address bar for a localhost https connection that uses a self signed certificate? [closed]

I am currently implemented SSL for my Web App in tomcat using a self signed certificate using java Keystore tool. I am using the web app in my machine as localhost. When I visit the url ...
0
votes
1answer
1k views

Bastion host for PCI compliance

A client in the retail industry has a network with point-of-sale (POS) terminals that connect to a POS Server. Additionally, most of the Windows workstations in non-sales areas also connect to the ...
0
votes
1answer
132 views

How to securely store sensitive data on a shared-hosting provider while accessible to server-side scripts?

I want to store some sensitive data on my hosting provider which is a shared-hosting, lets say for example on MySQL, and i want it to be accessible to the website(server-side languages like PHP) ...
0
votes
1answer
263 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
0
votes
1answer
541 views

Hardening CentOS 6 web server security [duplicate]

There is a web server installed as a virtual machine in the cloud. I've configured it myself, and it has two corporate web sites on it. I'am not planning anything else to be there. So before it goes ...
0
votes
1answer
321 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
1answer
1k views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
74 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
1answer
443 views

Restrict access to SQL Server backups based on user?

Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...
0
votes
1answer
175 views

Global Authority for Blacklisting IPs

I know that there are few common ways to block attacking IPs (such as deny in htaccess). Additional to that, we could get a huge list of IPs to block from misc sites such as : ...
0
votes
1answer
186 views

DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected)

Could someone please tell me which penetration-testing tool leaves behind a page that looks like this? DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected) ...
0
votes
2answers
431 views

Determine windows server attack? Should I monitor the server and block IPs all the day?

While Viewing the windows server 2008 event log, I always find many security events 4625/logon as follows: **An account failed to log on.** Subject: Security ID: SYSTEM Account Name: ...
0
votes
3answers
974 views

iptables rule to stop DDOS [duplicate]

My server is undergoing a ddos attack with the traffic in my apache logs appearing like: ip address - - [11/Apr/2013:01:01:04 -0600] "POST / HTTP/1.1" 416 31 "-" "Microsoft Internet Explorer" ip ...
0
votes
1answer
456 views

Network setup on AWS for NFS

I have a number of servers which all need external IP addresses, as they provide different services and need to be invidually accessible: server1.mydomain.com > 1.2.3.4 server2.mydomain.com > ...
0
votes
1answer
47 views

Limit SNMP access to VPN

I need to deploy about a thousand machines across the US later this year. I'm hoping to use SNMP to monitor their (collective and individual) status. The whole block will be connected via OpenVPN so ...
0
votes
1answer
133 views

Is the connection from PHP to a different MySQL server 100% secure?

I tried to find this information but was not able to. How is working the connection from PHP to MySQL server. As the password is sored plain, is it also sent plain to MySQL if it is stored on a ...
0
votes
3answers
72 views

watch file to see whos accessing/writing it and log it

I am facing some malware problems on my webserver. I updated third party software such as Wordpress to the latest version, disabled root logins and my users password complex enough but still someone ...
0
votes
1answer
222 views

DNS Reflector Attacks — protection

[~]# /usr/bin/dig +recurs @MYIP www.facebook.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> +recurs @MYIP www.facebook.com ; (1 server found) ;; global options: ...
0
votes
2answers
150 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
0
votes
1answer
100 views

Malicous Iframe appearing on website [duplicate]

One of the websites which I look after appears to have been compromised. However I am still trying to locate the source of the problem. A hidden iframe appears on the page, however it only appears ...
0
votes
1answer
67 views

SSL configuration for domain pointing to EC2 instance

I have my custom domain pointing to an EC2 instance. Say mydomain.com -> [Elastic IP address for my EC2] I would like to add SSL certificates so that I can access the site via https - ...
0
votes
2answers
221 views

What types of security threats does a vlan protect against? [closed]

I'm learning about vlans. The literature says that they provide improved performance and security by segrating the physical network into separate "virtual" networks. I understand the performance ...
0
votes
1answer
161 views

Stop server's use as proxy

I have a vps server on which I have configured apache as a webserver. Because of unexpected high usage of bandwidth, I checked the access log of my server yesterday. There were a lot of requests of ...
0
votes
1answer
428 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
0
votes
1answer
122 views

How to ensure a password entered on command line is not stored at all on Linux server?

I've got a web page PHP script which runs p7zip on the server: This passes a user supplied password for encrypting their uploaded files. Secondly the password is then emailed via PHP to the ...
0
votes
1answer
260 views

Is there a way to allow specific permissions to a non-root user?

I have a program that, at some point, create/destroys tun/tap virtual adapters. Obviously, for these specific operations this program requires root privileges. According to the program ...
0
votes
2answers
754 views

Nginx - prevent a .php file running on anything but your own server/domain?

We have an mp3 player that runs via an iFrame, not our choice but thats how we're stuck with it. We want to prevent other people simply embedding the iframe on their site. What would be the best way ...
0
votes
2answers
398 views

Linux - Security - Is someone trying to find a way in? [duplicate]

Possible Duplicate: Hundreds of failed ssh logins Recently I have been spending more time on my production servers in efforts to puppetize several configs and I happened to issue a find ...
0
votes
1answer
111 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...
0
votes
2answers
716 views

How to transfer large files between two remotes by using a third machine?

I need to automatically mirror a large amount (terabytes) of files in two unix machines over a slow link (1 Mbps). This needs to be done frequently, but the data doesn't change too much (delta ...
0
votes
1answer
59 views

Hyper-V Role on Server 2008 R2

So I read over a dozen articles regarding Hyper-V and iSCSI (host or VM using software) and they both have pros/cons about each. However, the host-based has better performance. So now that I decided ...
0
votes
2answers
541 views

Could it be that “chkrootkit” just doesn't like .hmac, .packlist, and .relocation-tag files?

I just cleaned up my hacked CentOS server (due to not updating since versino 5.3). But still, "chkrootkit" says this: Possible t0rn v8 \(or variation\) rootkit installed ...
0
votes
1answer
212 views

Security Risks of catch-all email address [closed]

What additional security issues does an MTA and email client face if a catch-all email address is setup on an sub-domain (that isn't published/publicly listed anywhere) compared with setting up ...
0
votes
2answers
2k views

Scripting Local Security Policy settings

We have a bunch of Windows 7 laptops out in the field. They're not in a domain. We'd like to build a script/batch file that we can send to each machine and, when run, configure screensaver locking, ...
0
votes
1answer
437 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
0
votes
1answer
810 views

Windows Task Scheduler Security Issue [closed]

Using the Windows Task Scheduler allows non-administrator users to gain access to administrative rights. Normally, Windows prevents execute applications which need to have more rights. A message ...
0
votes
1answer
215 views

Can tcp_wrappers be bypassed?

I utilize TCP wrappers to secure services running on my machine. Things like webmail, cpanel, whostmgrd, and so on. I use the hosts.allow/hosts.deny files to facilitate this. Is it possible for an ...
0
votes
1answer
807 views

Allowing any file to upload on server and security risks

We are having a project that allows users to backup there data to server through php upload,running on Linux server. If users upload any executable file it will be automatically renamed to some ...
0
votes
1answer
2k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
0
votes
2answers
607 views

CentOS security for lazy admins

I'm running CentOS 5.5 (basic LAMP with Parallels Power Panel and Plesk) and have thus far neglected security (because it's not my full-time job, there is always something more important on my ...
0
votes
2answers
70 views

Secure every connection between endpoints

Sometimes one has to work with software that hasn't built in security-features for non-local connections. In fact, some client-libraries are sending credentials in clear text over the wire. On the ...
0
votes
1answer
163 views

Securing Erlang / Ubuntu server

I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
0
votes
1answer
248 views

Weird Apache Error Log [duplicate]

Possible Duplicate: What are these weird access requests? [Thu May 03 11:39:36 2012] [error] [client 200.159.40.31] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:) ...
0
votes
2answers
1k views

Reverse Proxy - should it be a different technology stack?

Got a skeptical question about a reverse proxy setup I'm considering. I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
0
votes
1answer
670 views

Optimized LAMP/LEMP stack scripts

In the "let's try not to reinvent the wheel" perspective, I've been looking for a packaged LAMP (or LEMP) stack for some time now, not only the basic Mysql, Apache , PHP etc... but ideally stuff like ...
0
votes
1answer
2k views

CentOS apache startup config file security error

I am setting up a NetDisco machine on CentOS, which entails adding an include to the apache httpd.conf file. When I start apache by running "httpd" from a root command prompt, the process launches. ...
0
votes
1answer
685 views

ossec email alerts

Just installed ossec and sendmail however can't able to get alerts to my gmail from ossec. I am able to see the alerts on the sendmail localhost, however alerts seem to be not forwarding to gmail.
0
votes
1answer
226 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
0
votes
4answers
1k views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
2answers
2k views

Save any file directly on Windows server instead of the user's PC?

I am using a Windows 2003 R2 server and an XP system. I want to save any file (like- .doc, .xls, audio and video file) directly on the server from XP system. There must be no option to save the file ...