Collaborate Disseminate
BREACH, a new attack on SSL that targets HTTP compression, has recently been publicly announced.
I manage a few web servers. How can I audit them to check which of them are potentially vulnerable to BREACH? Is there a simple way to scan… Continue reading How to audit web servers for resistance/vulnerability to BREACH
How can I disable DSA and ECDSA authentication on my server with OpenSSH 5.9? Sifting through the documentation material and doing a web search didn’t yield any results – only an old bug report for the Debian package here (an… Continue reading Disabling authentication via DSA keys in OpenSSH?
How can I disable DSA and ECDSA authentication on my server with OpenSSH 5.9? Sifting through the documentation material and doing a web search didn’t yield any results – only an old bug report for the Debian package here (an… Continue reading Disabling authentication via DSA keys in OpenSSH?
When setting up a server, what configuration changes do I need to make sure that all of the software uses /dev/urandom instead of /dev/random?
Some servers don’t have much entropy in the entropy pool (e.g., VPSs). If a software component… Continue reading What do I need to configure, to make sure my software uses /dev/urandom?
I’m trying to brainstorm a security scheme for the problem of verifying server software integrity. The domain of this problem is Game Servers built on Valve’s Source Dedicated Servers. These servers are used in competitive gaming, and the … Continue reading Verifying server software integrity?
Following the hardening theme….
What are some best practices, recommendations, required reading for securing MySQL.
We have already had questions on here about Hardening Apache, Hardening PHP and Securing SSH.
To continue this trend I am interested in what steps people take to harden Linux servers. As in what steps do people always take when setting u… Continue reading Hardening Linux Server
What are some best practices, recommendations, required reading for securing an Apache Server?
Continue reading Best practices for Apache Server hardening?