Collaborate Disseminate
If I have a system where I have 100% control over the client operating system and the server operating system, is there any use case for enabling more than one cipher suite (or any of the options that something like openssl will let you co… Continue reading If I control both sides of a connection, is there any reason to support alternate cipher suites?
If we have a file that needs to change on a device that is monitoring with a tool like Qualys File Integrity monitoring. Either on Windows or using auditd on linux, how do we temporarily put some sort of "force field" around fil… Continue reading How to legitimately make a change to a file under file integrity monitoring?
I administer a few hundred servers and am going through a yearly PCI audit. This time around we need to prove that we’ve got anti-virus protection on our “systems commonly affected by malicious software (particularly personal computers an… Continue reading What is the difference between a server and an appliance for PCI purposes?
I have a request to find out if there is a way to store syslog messages encrypted. I don’t have a problem with making logrotate (or a bash script) encrypt messages nightly, but is there a way that I can stream encrypted syslog messages? … Continue reading Writing encrypted syslogs [migrated]
My machines routinely get scanned by Qualys and other scanners that report my supported and patched version of php as wildly out of date (even though they’re patched quarterly, I get flagged on ancient CVE’s for php and apach… Continue reading How do scanners know which apache2 modules are installed?