New answers tagged security
8
votes
Accepted
Vmware Virtual Machine Securing Access
Yes. They can access all data, including CPU registers and memory content at will, and there's no way you can tell. Any encryption keys can trivially be extracted from a running VM, so even full disk ...
- 7,065
2
votes
Probed for .env files in commonly used resource paths
They were looking for .env files, commonly holding environment variables used in e.g. docker deployments. Such files typically contain credentials for databases and so forth, and would thus be of ...
- 7,065
1
vote
Are Packages In Centos Yum Repo's Secure?
That's the purpose of long term support. Packages are updated, without being upgraded, so third party software is unlikely to break. The price is that backports may take some time, and you can't get ...
- 7,065
1
vote
vsftpd and home directories of chrooted local users
A chroot simply changes the root folder of the directory tree, so you can't cd a folder up from that point. Somehow developers have assumed $home_folder should be the chroot and packaged the two ...
- 11
0
votes
How can I reliably discover CVEs relating to installed packages
I am satisfactorily using Vuls on a bunch of *nix platforms.
- 1
1
vote
CA Offline Standard publish Active Directory
"Publishing to AD" involves using Active Directory to publish Certificate Revocation Lists (CRLs) and the CA certificates via LDAP. That is, relying parties download (pull) CRLs and ...
- 4,604
1
vote
IIS 10 - IP Address And Domain Restrictions is denying all traffic
I figured out what I was doing wrong.
The IP range I was using was my network's public IP range, but I was testing out the rules on a server that's internal on our network, and so when I instead used ...
- 123
2
votes
Accepted
IIS 10 - IP Address And Domain Restrictions is denying all traffic
At Edit Feature Settings... you can set the option Access to unspecified clients: to Deny and remove the lower entry.
- 854
0
votes
Trying to run Security Onion on AWS behind an ALB (nginx behind ALB)
I was able to get this working by inserting a simple healthcheck in the nginx config.
server {
listen 443 ssl http2;
server_name 192.168.1.something;
location ...
- 755
Top 50 recent answers are included