Collaborate Disseminate
What I am trying to do
For reasons I may not go into, we must allow Anonymous Bind in AD on a private network. I am fully aware of the risks associated with this. I have found a myriad of documentation around enabling and … Continue reading Limit information disclosed in AD Anonymous Bind
I’m considering the usage of SELinux for several lamp (linux+apache+mysql+php) servers. I have tested SELinux in a virtual machine and have configured some basic rules (allow PHP, email, etc.) and for the moment all seems to … Continue reading Pitfalls of using SELinux for LAMP servers
I’m trying to apply the principle that data is toxic asset in a system with many services through which this toxic asset must flow.
The system can be abstracted to 3 actors: clients, intermediaries, and (data) sources. Clien… Continue reading Handling toxic data in a microservice architecture
If you are a security professional who has not taken the plunge into Docker, this segment is for you! Paul highlights some of the configuration options available for Docker containers and how you can apply them to both your operating system and application hardening strategies. ############################################################ # Dockerfile to build Nginx Installed Containers # […]
The post The Opportunity For Hardening Docker Containers – Enterprise Security Weekly #53 appeared first on Security Weekly.
Continue reading The Opportunity For Hardening Docker Containers – Enterprise Security Weekly #53
The company I work for has to send monthly payments to 20 to 50 users at a time. These users can change from month to month. Generally, each user will receive money from us for 2-3 months.
The users complete a form in which … Continue reading Storing UK bank account and sort code in MongoDB database
Paul and Doug talk about the need for and the pitfalls of egress filtering in your enterprise network (and sweaty lawyers). Full Show Notes Visit http://securityweekly.com/esw for all the latest episodes!
The post Network Hardening Using Egress Filtering – Enterprise Security Weekly #52 appeared first on Security Weekly.
Continue reading Network Hardening Using Egress Filtering – Enterprise Security Weekly #52
We are prototyping a security camera product using Raspberry Pi 3 as the hardware platform. The camera has capability to connect to the cloud over internet as well as offline processing when the internet is disrupted.
Curre… Continue reading Security essentials for a embedded Linux device
The tool checksec.sh is used to examine compile time hardening options such as NX, RELRO, PIE and so on.
It also reports if the binary has RPATH or RUNPATH set, using the following logic:
These are flagged as red when pres… Continue reading Why does checksec.sh highlight rpath and runpath as security issues?
I am running Synology’s DSM torrent client on a NAS. As I have to (?) open and forward one UDP port for DHT and another one (UDP/TCP) for data transmission I am exposing myself to threats originating from the internet. If I don’t, I circum… Continue reading Hardening/Security considerations for torrent clients
I am writing an open source python tool aimed at inventoring/auditing and hardening of a system. When I started off with the project, I did some research around it and figured out that there were not many tools (at least open… Continue reading Difference between Lynis and Nessus and yet another hardening tool