Collaborate Disseminate
I’m working with a nonprofit that wants to use CiviCRM to process its donor, member, and patron personal information. Civi is CMS-based, and will only run via WordPress, Drupal, Joomla, etc.
Newb question: If I set up WordPress on localh… Continue reading Is using localhost for sensitive data secure?
It’s a well-established fact that companies prefer cloud solutions to on-premises ones when it comes to practically any software. It’s estimated that over 80% of all enterprise workloads will be in the cloud by 2020. But what about an intra… Continue reading A No-Compromise Approach to Your Cloud-Based Intranet Security
If I publicly list my company’s intranet and extranet website addresses, is it a risk?
Continue reading Can revealing Intranet address become a security threat?
The Situation
I’m presently a member of a healthcare records team that is sorely understaffed and has an incredibly low bus factor, with only two people with the majority of system knowledge, myself – allocated temporarily, … Continue reading Addressing security issues for documenting internal systems
Imagine a server that is only supposed to serve itself (restricted to TCP by a standard). Naturally, it would only listen on the loopback interface and never worry about attacks from outside networks.
Unfortunately, there ar… Continue reading A server that must only serve itself but listens on all network interfaces
This question already has an answer here:
Generate X509 ERR_CERT_COMMON_NAME_INVALID
1 answer
The Setup
In order to prot… Continue reading Server secured with a Certificate from a Custom CA Root: OK on Firefox but KO on Chrome? [duplicate]
How important is encrypting traffic that never leaves a data center?
To me, it seems both important and (thanks to IPsec) easy to achieve. However, it seems to rarely be done; Google does not do it, for example.
How import… Continue reading How important is encrypting traffic that never leaves a data center?
I have a home network, big family, with around 20 devices on it at any given time. It seems like every year or so, some device gets a virus or a security flaw is revealed, and the device starts behaving badly.
Normally the d… Continue reading How to detect when one or more devices in my local network have become DDOS attack nodes?
Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to encrypt access to intranet… Continue reading Do I need to encrypt connections inside a corporate network?
Based on the answers provided on this question I am installing Let’s Encrypt for the first time, and it’s on a company intranet. I have control over the subdomain which I want to install the cert, but not over the root domain… Continue reading Let’s Encrypt on Intranet DNS challenge failing [migrated]