Collaborate Disseminate
I won’t get into details but I live in a shared home. Due to my OCD, and having my files and whatnot perfectly set up, I know for a fact that my device has been tampered with multiple times when I am not at home. Plus, having a notificatio… Continue reading Device compromised, server as well, any tips for future hardening? [closed]
This server hardening guide suggests re-generating the RSA and ED25519 host keys. What is the advantage of re-generating the default key?
Continue reading Why should I re-generate a server’s SSH host keys?
A number of articles suggest removing insecure (broken) SSH key types in order to have a more secure server. In practice, if I only connect to the server with secure key types, why should I bother deleting insecure key types? What is a pra… Continue reading Why should I disable insecure SSH hostkeys if I never plan on using them?
I need to perform a security audit/assessment on 4G LTE hardware equimements :
4G landline wireless phone (not android OS but with many features such as WiFi hotspot)
4G Wifi home router
Is there any standard/guideline/procedure (or any … Continue reading Is there any guideline or procedure for 4G hardware equipement (4G landline phone and home Wifi router) security audit/assessment?
I want to migrate from Windows to Ubuntu.
I understand that Ubuntu’s1 security model is a bit different than that of Windows but I don’t aim to ask about this particular OS, rather, in general, what should I do to protect a Free and Open S… Continue reading How to harden a FOSS and gratis operating system?
I was recently added ("tossed" is perhaps a better term) to a project that dabbles in the world of cybersecurity. My employer gave me the task testing a server our company is developing software for, the end use of which will be … Continue reading Resources for learning the fundamental principles of OS hardening (and how to test)
As a junior security candidate I am under the impression of all these misleading videos and SEO enriched articles full of some of the same copy and pasted top results and really need a better under standing or a foundation for better exper… Continue reading After hardening Windows, Macintosh, and a Linux flavor which is truly toughest?
If I loan out laptops to my employees to work remotely, such as Dr’s, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop’s ability to power on/charge?
Are there any mo… Continue reading Remotely disable a laptop’s ability to power on or charge?
I am using Selinux now for a while and I like it pretty much. But so far I was not able to setup rules in a way so that I could prevent my browser from reading my private ssh keys. So far I got this setup:
id -Z
staff_u:staff_r:staff_t:s0-… Continue reading Using Selinux to prevent Browser from reading priave SSH keys
Is there any tool/products out there which can do the following?
apply CIS or custom hardening settings on servers (linux)
monitor those settings for changes and report
fix the deviation from the tool, whenever asked by the compliance tea… Continue reading Security configuration manager tool [closed]