Questions tagged [security]
Security is not a product, but a process.
3
votes
2answers
288 views
LibSSH authentication bypass
With the recent security announcement by libssh (CVE-2018-10933) I wonder how to find out if any of my running services use the vulnerable library? I will eventually yum upgrade the system but for now ...
0
votes
1answer
16 views
How do I access a network drive that won't upgrade past SMBv1 w/ devices that have been Updated to SMBv2 & v3?
I am getting Network drive error code 0x80070035 because the network drive is no longer being updated or supported by the manufacturer.
I still want to use the drive since its a good drive, but I don'...
0
votes
0answers
10 views
fial2ban0.9.7 crashing when system.log rotates on macOS10.10.5
I'm trying to install fail2ban0.9.7 (https://github.com/fail2ban/fail2ban/)
on a Mac running macOS10.10.5 Yosemite.
It is a great program that I run perfectly fine on Unix, Linux and macOS10.6.
But ...
0
votes
1answer
14 views
Need to add a login to a database for SSMS (Sql server) 2008 r2
I need to add a login to a database for SSMS (Sql server) 2008 r2
There is an answer to a very similar question here:
How to add users to SQL Server 2008 Management Studio:
https://stackoverflow....
0
votes
0answers
9 views
How to secure ZeroTier node when I don't know IP address up-front?
I have 10,000 Raspberry Pi's connected to a ZeroTier VPN network.
How do I expose services on those machines to a master machine on the VPN (and potentially other Pi's), but not to the broader ...
1
vote
1answer
44 views
Preventing a server from accessing parts of the network
I did a preliminary search and was unable to find an exact / similar question.
I'm configuring a server in our network, in order to give SSH access to a normal user from a third party.
I'm trying to ...
0
votes
2answers
36 views
HTTPS - Can my Employer/ISP read my Gmail / WhatsApp Web messages [closed]
I'm going to try to keep this as short as possible, but if you need any additional context or information, don't hesitate to ask. Also, if this is not the correct SE platform for this question, please ...
-2
votes
1answer
37 views
Does iphone Touch ID count as 2FA? [closed]
Yes it does because
The customer has the physical iPhone
The customer 'is' the owner of the fingerprint
But no it doesn't because
1=>2 : If you steal the customer's iphone, the fingerprint is now ...
0
votes
0answers
32 views
Do Amazon EC2 instances use hardware from Elemental Technologies?
My company received a security bulletin from one of our clients asking whether our servers were impacted by the reported spy chips installed on Elemental Technologies servers. Amazon purchased ...
0
votes
1answer
15 views
Using auditd and retaining log files for 6 months.
Disclaimer: I'm not an accredited nor very experienced sysadmin but have been tasked with some sysadmin responsibilities
Task: Find a way to log all account management activities (e.g., account ...
-1
votes
0answers
35 views
Need information about Network Monitoring Tool [closed]
Recently our networking team at HQ deployed a network monitoring tool to monitor routers, servers etc. which monitors node in real-time and gives an audio alarm when a node gets down. But they didn't ...
1
vote
1answer
25 views
Locking AWS Instances connections
I have a couple of EC2 Instances, ranging from Front-end servers, Back-end servers, Database servers and Node servers. They all communicate together and sometimes the developers needs to access these ...
2
votes
0answers
52 views
How does SSL certificate benefit a public informational website? [closed]
One networking expert posted a video today in Facebook saying that a government website (which is a subdomain of kerala.gov.in) has no SSL certificate installed. That website is actually just for ...
0
votes
1answer
31 views
ssh spammed from 127.0.0.1 (“Did not receive identification string” and “Bad protocol version identification”)
Prequel: I've seen this question, but it's not quite the same situation. I'm particularly curious about 'heroku' showing up in the logs.
I just built and spun up a new Ubuntu 18.04 box that I am ...
0
votes
1answer
18 views
Security advantages: check_by_ssh versus check_nrpe
The question is which is more secure - as opposed to which is better from a configuration standpoint.
I have a number of Centos and Debian systems. The NRPE daemon is installed and working on all ...
2
votes
2answers
71 views
Any security risk in creating root public/private keys and adding public key to Github repo?
I would like to do version control on some important directories on my server such as /etc/apache. All the files and subdirectories in that directory are owned by root:root. Would it be considered a ...
github
-3
votes
0answers
42 views
How secure is qubes os?
How secure is qubes os?
Lets say i have bought dedicated bare metal (NOT VPS) server in some country.
Installed qubes os, LUKS encrypt disk and run some PROCESS in security qube.
Now, lets say ...
0
votes
0answers
21 views
App Engine: Enable Managed Security
I have had an app with a custom domain hosted on Google App Engine for several years. I'm finally getting around to enabling managed security, and it won't work for me. I select the custom domain and ...
google-cloud-platform
0
votes
2answers
18 views
Apache logs showing CONNECT request to server that isn't mine
I've just installed an ELK stack on my server and I'm noticing something strange whilst watching the APM (at least I think it is strange, anyway). My Laravel application is continuously getting a ...
0
votes
1answer
27 views
Vulnerability risk in modern vlans
I'm looking at using VLAN to separate some traffic without buying a bunch of switches for two or three devices. The plan is to use untagged ports for dedicated lans with an external router connecting ...
-1
votes
1answer
41 views
How to enable IBRS when it is disabled?
I have been updating some servers to the latest patchlevels and wanted to check the security state regarding Meltdown, Spectre and Spectre-NG.
Using the current V 0.39+ of the spectre-meltdown-...
0
votes
2answers
54 views
Safety of RDP without network level authentication
I have been reading about RDP and Active Directories and I have gathered following understandings that I'm not sure are correct:
Seems like RDP with Network Level Authentication works only (or most ...
0
votes
1answer
39 views
ONLYOFFICE - JWS secret doesn't work (can connect without)
I'm running ONLYOFFICE Document Server under an https:// vhost on nginx on Ubuntu Server 18.04 LTS. It's reachable at onlyoffice.example.com and I also have a Nextcloud instance at nextcloud.example....
0
votes
0answers
17 views
How to deny access to subdirectory in Apache 2.4 using apache2.conf?
I have a default installation of Apache2 (2.4) on Ubuntu Server 18.04 with MySQL and PHP. I didn't set up any virtual hosts.
I placed files into /var/www that I want to serve up, but I need to deny ...
-1
votes
0answers
18 views
Which is the best method of replicating static content for WordPress on Alibaba Cloud? [closed]
I am in the process of creating a fault tolerant WordPress site on Alibaba Cloud. I will use 3 VPS server.
I will deploy HAproxy on server1 and this will distribute web requests to server2 and ...
0
votes
1answer
46 views
How do I use Google Cloud VPN to connect to a client's network, when the client has reserved all possible internal IP addresses?
Goal
I would like to make use of an API by a 3rd party. This 3rd party requires that I establish a VPN connection to their network. As such, they need a remote peer IP address to establish the VPN, ...
0
votes
1answer
68 views
Forwarded connection refused by server: Administratively prohibited. Using both @IP and PermitOpen
[This Machine is 192.168.80.125]
Normal SSH Rules to allow all basic access:
AllowUsers user1
PubkeyAuthentication yes
PasswordAuthentication no
AllowTcpForwarding ...
2
votes
2answers
64 views
How can I access Production DB securely without static ip
I am running a small scale app on AWS EC2 and it has PostgreSQL installed on it.
I want to access this production DB remotely but also want to keep it secure and I'm not sure if what I am doing is ...
0
votes
0answers
14 views
Windows Containers: Can Administrator user inside a container access files outside that container?
Question about Windows Containers with Docker security model. Let's suppose that we have a Host operating system, Windows Server 2016 with Containers feature enabled, which we install Docker on. Let'...
0
votes
2answers
59 views
Is there any way to cache or forward https requests to an http proxy using Squid?
I currently have squid setup to use a self-signed certificate for MITM to cache HTTPS requests. This works. If an item is not in the cache I want to request from an online proxy like Crawlera. ...
0
votes
1answer
38 views
How to prevent nmap from fingerprinting HAProxy
In our periodic security scans, our HAProxy instances are always reported as a version disclosure vulnerability. On further inspection, it appears that there are no version banners in any responses ...
1
vote
0answers
37 views
How to restrict administrator access by source IP for any protocol on windows ?
I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses.
Note: I mean not only RDP access but ANY port/protocol that allows ...
-2
votes
3answers
54 views
Is TLS necessary for security in a properly secured network?
TLS provides a great way to trust content between two sources in an untrusted, multiple hop network.
However, with VPCs and network namespaces, it seems to me that TLS doesn't actually provide any ...
0
votes
0answers
10 views
Enable HSTS on Google Load Balancer
I'm currently trying to enable the hsts header on my teams Google load balancer. I do not see any options for the enabling of this header on the menu. I have done some digging and found this ...
0
votes
0answers
23 views
How to determine if a password was changed remotely or on a local PC
There is a Windows 10 Enterprise PC that's password was changed (local admin). The user reported that they do not have the admin password. The event viewer specifies a time and date where it appears ...
0
votes
0answers
23 views
Any Issues Setting Active Directory Groups Up This Way?
I am looking into restructuring our AD Groups Infrastructure and am having a hard time find the best way to reorganize.
The reason this is a unique challenge is because of our employee roles. No two ...
0
votes
1answer
23 views
Wordpress security issue in nginx [duplicate]
I installed wordpress latest version in Ubuntu 16.04 with nginx. But after some days of installation I see some unknown file in root directory.
like alias99.php. How to prevent/block this. I already ...
2
votes
0answers
27 views
Catch backslashes, single and double quotes in GET requests
According to this SQL Injection Basics article:
<…> the operations mostly used for breaking\fuzzing the SQL query’s are.
' Single quote
" Double Quote
\ Backslash (MySQL Escape ...
1
vote
0answers
39 views
docker check if default seccomp profile is applied
I wish to know whether or not a specific docker container runs the default seccomp profile. I have no access to the command line which has been used to start the container, nor to the Dockerfile.
...
0
votes
1answer
218 views
OpenVPN 2.4 security differences between tls-crypt and tls-auth
I was reading and tls-crypt and was curious would that increase security and reduce the chance of keys being compromised during handshakes and that it offers better security over tls-auth?
Maybe ...
0
votes
2answers
33 views
Best way to secure a SQL VM when clients do not have static IPs
I have a VM running SQL in the cloud. Typically I would set up inbound rules on the SQL ports in Azure and on the VM's firewall, but my clients do not have static IP addresses to use in the rules.
...
1
vote
0answers
57 views
Why a TCP connection fail faster on Linux closed ports than on Windows ones?
While trying the simple exploit described here I noticed that it doesn't works on Linux while it works on Windows (tried with several browsers).
Apparently this is because, on Linux, the operating ...
0
votes
2answers
848 views
Someone just trying to hack me? login.cgi+wget
I'm build a new server on Apache, actually I am learning, so I'm trying different things. My security system is already done, but of course I may miss something, or, if not, I do understand that today ...
-2
votes
1answer
28 views
When is an email rejected by the receiving server? [duplicate]
Currently, I am working on a web application and wanted to create a web form to let users write emails through it. So, they would have to set their email address and the message and after clicking "...
0
votes
1answer
178 views
OpenVPN - TLS Error: TLS handshake failed. Does this mean someone is trying to bruteforce in?
Ive been using OpenVPN setup on my router for accessing various things on the network while I am remote. Once in a while I check the logs to make sure everything looks in order. To my surprise when I ...
3
votes
0answers
22 views
How to filter external HTTP requests using on remote host location and GET parameters with Tomcat8?
I have a tomcat 8 web applications server and it has a running application (/app). This /app can be accessed from both internal and external HTTP GET requests but 1 request from external should be ...
1
vote
2answers
105 views
Bash script as use shell not working with SSH
I'm trying to use a specific bash script as a user shell.
So that if the user logs in, the script will be executed.
I've created the script and placed it into the home directory for the specific user....
0
votes
0answers
14 views
Apache mod_dbd: DBDParams with encrypted password
I'm trying to configure Apache 2.4 with mod_dbd to connect to PostgreSQL for user authentication. (Ref: https://httpd.apache.org/docs/2.4/mod/mod_dbd.html)
Is there a possibility to store the ...
0
votes
1answer
15 views
Amazon GuardDuty: How to filter out Finding Type?
I am testing out Amazon GuardDuty and see that I am able to search the results by finding type effectively, but how can I remove a finding type to show all the results except that single type (other ...
0
votes
0answers
9 views
Using shibboleth with out-of-process application servers
I have a legacy CGI application which I've convinced to run under plack (specifically, it runs in starman, but I don't think that's relevant to the question). The kinks around persistent vs. ...
