Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
3
Newest
 Scholar
Impact
~144 people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Apr
21
awarded  Scholar
Apr
21
accepted How much protection is provided for my remote centos vps by using certificate-only root login
Apr
21
comment How much protection is provided for my remote centos vps by using certificate-only root login
Most of what you are talking about I assumed, since every security book in the world says so, but my shared hosting experiences made me parinoid. I'm going to give HN his points now.
Apr
21
comment How much protection is provided for my remote centos vps by using certificate-only root login
I guess I noticed that a lot of these exploits depend on getting root access. I am trying to figure out if I can prevent these by eliminating passwords altogether. They got my mail server last time by compromising my ISP admin panel. I think without a password it wouldnt have worked, but I am not a security expert. Just an IT Developer.
Apr
21
answered CentOs, Apache24
Apr
21
asked How much protection is provided for my remote centos vps by using certificate-only root login
Apr
11
answered Do “Old Passwords” have an expiration?
Aug
21
comment Kernel: Uhhuh. NMI received for unknown reason 31 on CPU 3
Did youu ever ressolve the issue, @user209395 ?
Oct
5
awarded  Supporter
Oct
5
comment What is the most secure way to set up a mysql user for Wordpress?
@JohnGardeniers How do you manage the table clean-up? I don't like handing out DROP privileges when I can avoid it. Is there a utility for cleaning up orphaned DB items?
Oct
5
comment What is the most secure way to set up a mysql user for Wordpress?
I'd definitely say I'm in need of convincing on this. I don't believe in GRANT ALL as a matter of security philosophy.
Oct
5
comment What is the most secure way to set up a mysql user for Wordpress?
Wonderful! It is truly good to understand the whys of these things. I am setting up my whole vps from the ground up for retail Wordpress hosting for power users. I am looking to host designers and developers who need managed hosting, so I need to make security job one. I am taking a "only add exactly the permissions someone needs and not a bit more" attitude. And I fully expect to be attacked and maybe even hacked. Sad but true. Locks are for honest people. But locks certainly slow them down. I want to make having their blog hacked something my users don't have to fear because I'm on it.
Oct
5
awarded  Student
Oct
4
comment What is the most secure way to set up a mysql user for Wordpress?
@AlexanderJanssen I administer/ develop from putty or webmin. Do I look to MySQL like I am at localhost or my real ip when I am on a terminal connection? What domain do I use for my administration user? I don't want to grant more than is necessary for any user(even me) because I have read that it is advisable to limit the domains to the smallest possible set to thwart some hackers. I know I am paranoid, but I've been hacked. This is why MySQL is set up where you have to explicitly add domains and permissions, right? What is the smallest set for remote login? Sorry if that wasn't clear.
Oct
4
comment What is the most secure way to set up a mysql user for Wordpress?
Thank you. Is it true that user only really needs 4 privileges?
Oct
4
asked What is the most secure way to set up a mysql user for Wordpress?