Collaborate Disseminate
I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our system has NX bit.
What if we made the… Continue reading Using instruction set architecture (ISA) to stop stack overflows
There seems to be a consensus, that
-D_FORTIFY_SOURCE=2 -O1
is a hardening measure that should be applied as compiler option. This was also a recommendation in the Dovecot Pentest Report.
What I’m confused about is, that… Continue reading Are Optimization Flags Harmful?
I’m setting up a limited user account. I would like it as limited as possible, while retaining the capabilities of: running a handful of programs, and saving files into one folder.
Can I use ACL rules to deny access to all … Continue reading Limiting a standard user on Windows
I’m setting up a limited user account. I would like it as limited as possible, while retaining the capabilities of: running a handful of programs, and saving files into one folder.
Can I use ACL rules to deny access to all … Continue reading Limiting a standard user on Windows
I am running the following version of GNU/Linux Debian:
cat /etc/issue
says:
Debian GNU/Linux 9
Using the following kernel:
uname -r
says:
4.9.0-2-amd64
And running the following version of OpenSSH:
apt-cache… Continue reading Hardening SSH security on a Debian 9 server
I’m looking into ways of hardening a computer’s security. One of the things is the BIOS.
Does adding a password to the BIOS prevent malware from infecting it?
I have seen this article: Protecting the BIOS from malware b… Continue reading Does adding a password to BIOS prevent malware from infecting it?
I’m looking into ways of hardening a computer’s security. One of the things is the BIOS.
Does adding a password to the BIOS prevent malware from infecting it?
I have seen this article: Protecting the BIOS from malware b… Continue reading Does adding a password to BIOS prevent malware from infecting it?
I need to audit an Aten load balancer? Can somebody share a hardening checklist or guide me to the specific links for creating one.
Please note I dont have experience with load balancers but have used and configured firewalls… Continue reading Audit checklist for load balancer
If you lock down an iSCSI mounted NAS volume (on Windows Server) so that Administrators have read-only access and your backups account has write access to the file system, the Administrator account can always take ownership o… Continue reading How to lock down iSCSI mounted NAS against ransomware
Given a service that needs access to some secrets from a config file to start, I can imagine three approaches:
1) Keep the file readable only by root. Start the process as root, read the config and drop privileges.
2) Keep … Continue reading Drop privileges after startup or start as unprivileged user?