Collaborate Disseminate
Does Linux (kernel and applications) support the NX-bit on ARM processors? If so, how can I check if an ARM-binary is compiled with this protection enabled?
Continue reading Does Linux support the NX-bit on ARM processors?
Does Linux (kernel and applications) support the NX-bit on ARM processors? If so, how can I check if an ARM-binary is compiled with this protection enabled?
Continue reading Does Linux support the NX-bit on ARM processors?
In some companies (not the one I work for), there are certain groups of employees that have permission of management to play certain games on their office network after the work day has ended. This was mainly prevalent back i… Continue reading What measures beyond those for general software, if any, should be taken when preparing a work PC for lunchtime or after-hour gaming?
Security researcher Jacob Appelbaum suggested to avoid certain code paths in the linux kernel that are related to conntrack that do protocol parsing (such as fdp, sip, etc.) right in the kernel for hardening purposes.
How to disable connt… Continue reading How to disable conntrack protocol parsing in the linux kernel?
I was wondering if the hardened profile from Gentoo was really more secure than any other distro (like Debian, RHEL, Arch …). For those who don’t know, Gentoo hardened allows a system to be built system-wide with specific hardening GCC o… Continue reading Gentoo Hardened vs other distros
With regard to the question: How does ASCII-Armoring help to prevent buffer-overflow attacks?:
How does the armored region prevent an attack?
If the most significant byte of the return address is 0x00 then the attacker may… Continue reading ASCII Armoring in a little endian system
At work we’ve been trying to move our external-facing services away from a policy of inclusivity (where we tried to accept as many people as possible) to a more security-focused setup.
The first step was pen-testing some of our core web a… Continue reading SSH ciphers, MAC and key-exchange (and pen-tests thereof)
I have a Chromebook I routinely use for things like e-banking and other things where a security breach would be catastrophic. I’ve read it is a very secure OS by nature due to its small surface area for attacks. That said, … Continue reading Hardening a Chromebook
I’m looking for some more information concerning the white paper which goes into some detail over PowerShell’s Module logging.
Specifically, once this is enabled, are the default cmdlets logged? For example, Get-Service and so on. Looki… Continue reading PowerShell’s Module logging
I’m looking for some more information concerning the white paper which goes into some detail over PowerShell’s Module logging.
Specifically, once this is enabled, are the default cmdlets logged? For example, Get-Service and… Continue reading PowerShell’s Module logging, a few questions