Collaborate Disseminate
not present in v2r3, I don’t have v2r4, this seems to be a new decision in U_RHEL_8_V2R5_STIG.zip
https://stigaview.com/products/rhel8/v2r5/RHEL-08-040010/
https://www.cyber.mil/stigs/downloads/
Rule Title: RHEL 8 must not install package… Continue reading v2r5 V-230492 RHEL-08-040010 says RHEL 8 must not install packages from EPEL? [migrated]
for what seems to be a security process that was either not fully thought through, or not documented as to what was expected to happen in the field…
The first time connecting via SSH protocol (and not necessarily using putty.exe from wi… Continue reading how to handle PUTTY first time SSH connection security alert host key not cached
I use NICE-DCV and using this as a realistic example to ask my question – upon connecting to a session on the server which is RHEL-8 from a client win11 pc, the client pc gets this security popup {I grabbed this from online in order to eas… Continue reading help understanding server identity fingerprint [hashing vs encryption process & terminology]
In the interest of data security…
when a cpu fails in a server and you remove it is there any way that removed cpu can retain any kind of data that poses a concern?
For example an Intel Xeon 1st gen scalable 8000 series processor release… Continue reading can a CPU once removed retain information that poses a security concern?
I have a Windows executable file that has been code signed with a certificate from a Certificate Authority. The CA is listed in the official Microsoft Trusted Root Program list of participants. The level of my cert is Open Source, which is… Continue reading Do code signing certificates build reputation only for Microsoft, and is reputation maintained across releases?
Currently, Can you provide your suggestion, whether my below approach is good with security perspective.
User clicks on login button which calls backend/api/login
Step1 triggers the oauth flow and finally google returns the auth token
Now… Continue reading Redirection from backend with frontend using OAuth token with Cookie
I am a student in university who desperately needs to take an organic chemistry course this summer but I’m on the waitlist. I need the 9 digit permission code, and I already know the first 5 digits. How can I go about this?
While freelance software developers can show their work to potential clients by building personal projects or by showing their previous client’s project how can a pentester do the same?
A pentester can’t provide audit report… Continue reading How to show your work to potential clients as a pentester?
As an admin one gets tasked with configuring [Microsoft Windows 10] computers so that auditing is enabled and captures all events as required by some list that’s already defined and handed down.
There are dozens of other th… Continue reading saving entire Windows event log for auditing & preserve digital evidence