Collaborate Disseminate
I am using Comodo Internet Security, and want to get access to the internet on my Windows Sandbox. If I disable the Firewall in Comodo sandbox gets internet but it exposes my PC.
I have added WindowsSandbox.exe and WindowsSandboxClient.exe… Continue reading Configure Comodo Internet Security to Allow Windows Sandbox to get internet [migrated]
I am using TPM simulator in my local VM to test FAPI API and am able to seal the important data inside directory ~/.local/share/tpm2-tss/user/keystore as per the path mentioned in config file /etc/fapi-config.json
"profile_dir":… Continue reading TPM FAPI sealing data inside /dev
I have a working cron job to backup the databases on a daily basis. I want to secure the authentication details in a mysql config file for mysqldump using –defaults-extra-file.
I know I can do the following
[mysqldump]
host = hostname
use… Continue reading Is it possible to put database in the cnf file To secure mysqldump [migrated]
I’m using an Apache Proxy with LDAP modules for authentication management. But I don’t want to hardcode the password of the LDAP service user to query the domain.
I have already used other applications that work with secure storage or wall… Continue reading How to avoid hardcoded passwords on Apache httpd config file [migrated]
In OpenVPN GUI, I am getting the red message
WARNING: this configuration may cache passwords in memory — use the auth-nocache option to prevent this.
I do not want to always re-type my password again and again. Is there a way to suppres… Continue reading OpenVPN: how to suppress "WARNING: this configuration may cache passwords in memory — use the auth-nocache option to prevent this"
My infosec officer is campaigning the use of client process-based authentication everywhere applicable for future and existing projects. For existing projects, especially for custom applications, this entails non-zero cost, not to mention … Continue reading Is process-based authentication more secure than username and password?
I am performing a system configuration audit of a Windows Server 2016 instance. I’m using a script that reads values from the registry and returns whether they comply with the CIS benchmark.
A lot of those checks fail due to either registr… Continue reading How to interpret missing registry keys during audit
There is a feature in the ASP.NET Core, that allows you to store sensitive configuration keys in the Azure Key Vault as Secrets.
However, I can’t see any attack scenario, in which this will help to protect my configuration values.
If my se… Continue reading Why I need to store my ASP.NET service configuration in Azure Key Vault
I just had a warning from Vivaldi 5 that Vivaldi’s profile might have been under a git repo, which could be a security risk exposing passwords and the like and that they had added a .gitignore to mitigate the risk.
• [Privacy] Add .gitign… Continue reading Risks / best practices in putting your `~`/user home under git to track configuration files only in that directory, not subdirectories?
I recently came across a question on stackoverflow.com regarding gitlab.com and ssh config. The solution apparently is to update your ssh config with the following:
Host gitlab.com
UpdateHostKeys no
Unfortunately the author of the top… Continue reading Are there any negative consequences if you change your ssh config for a host with `UpdateHostKeys no`?