Collaborate Disseminate
I’m looking into WDAC and the option to use Microsoft’s ISG for files that are not explicitly allowed or denied caught my interest. Unfortunately I haven’t been able to find any information on what is sent to the ISG to make the known good… Continue reading What information does the Microsoft Intelligent Security Graph use for querying files?
UPDATE : i know i modify the post significantly, will try to not do that anymore. Please read from scratch
Let’s imagine we have a machine that holds customer private keys to various crypto assets, that is vital to secure and should it be … Continue reading Theoretical unbreakable security for a single compute instance/machine [closed]
What are some good software may improve security of a Linux based OS, in any aspect without drastically changing how you interact with it (like SElinux). Some examples are below:
Apparmor & Firejail for isolation
Flatseal for isolation… Continue reading General software to harden a Linux OS [closed]
I’ve been looking into rowhammer attacks and mitigations and there are two (what seem to be) mitigations that I’ve seen that are actually implemented in currently available hardware and software, but aren’t mentioned in any studies I’ve se… Continue reading Rowhammer mitigations in current hardware and software
I use this initramfs-based FDE on my headless server. My motivation is to secure my system against physical tampering.
I am aware that securing an untrusted hardware is not possible. This question is more about understanding how things wor… Continue reading Understanding FDE: Is the encrypted Linux protected against a compromised boot volume?
I won’t get into details but I live in a shared home. Due to my OCD, and having my files and whatnot perfectly set up, I know for a fact that my device has been tampered with multiple times when I am not at home. Plus, having a notificatio… Continue reading Device compromised, server as well, any tips for future hardening? [closed]
This server hardening guide suggests re-generating the RSA and ED25519 host keys. What is the advantage of re-generating the default key?
Continue reading Why should I re-generate a server’s SSH host keys?
A number of articles suggest removing insecure (broken) SSH key types in order to have a more secure server. In practice, if I only connect to the server with secure key types, why should I bother deleting insecure key types? What is a pra… Continue reading Why should I disable insecure SSH hostkeys if I never plan on using them?
I need to perform a security audit/assessment on 4G LTE hardware equimements :
4G landline wireless phone (not android OS but with many features such as WiFi hotspot)
4G Wifi home router
Is there any standard/guideline/procedure (or any … Continue reading Is there any guideline or procedure for 4G hardware equipement (4G landline phone and home Wifi router) security audit/assessment?
I want to migrate from Windows to Ubuntu.
I understand that Ubuntu’s1 security model is a bit different than that of Windows but I don’t aim to ask about this particular OS, rather, in general, what should I do to protect a Free and Open S… Continue reading How to harden a FOSS and gratis operating system?