Collaborate Disseminate
I seem to recall that there was some problem with using sFTP in some government environments, but now I need to know if it poses a risk on a FedRAMP-compliant project.
Continue reading Is sFTP as a technology acceptable in FedRAMP compliant projects?
I’m looking at an IP range as a part of a project and discovered several FTP server. They all run vsftpd (3.0.2) on port 21.
I do not have login credentials and anonymous logins are disabled. Can I somehow identify whether t… Continue reading Differ between encrypted and unecrypted FTP (21) without login
Okay, we know the drill: don’t use FTP, use SFTP or FTPS.
But what exactly is the risk being posed? The files themselves are sent unencrypted, and this may be fine, or disastrous, depending on what the code in them contains…. Continue reading How insecure is FTP?
I know filezilla can work with pageant for private keys protected with a passphrase, however can you use fileszilla with a private key that is protected with a passphrase without using pageant? I am talking about Filezilla 3…. Continue reading FileZilla and private key with passphrase
I am looking for ideas today.
The problem:
Sensitive files are sent via REST (over SSL, of course) to a third-party server. I cannot touch them programmatically until they arrive at the server. Those files are stored there u… Continue reading Secure way to send files to server, store, then retrieve
Long time reader first time asking.
I have HIPAA data I need to get from point A to point B. Point A can either securely host the file to be pulled by Point B or push the data to Point B. I am primarily interested in the ov… Continue reading Is it best to have HIPAA data pushed to me or to pull it and how do those solutions differ from an infrastructure and security perspective?
A shell script (myscript) will be run as root, by cron. It reads IP addresses from a configuration file, and updates iptables to whitelist those IPs for inbound connections.
myscript uses a regexp (regular expression) to par… Continue reading Permissions for configuration file for program run as root that must be modifiable by SFTP
I’ve put together an ETL process with Python where I move some files from an SFTP server to a local sever. I’m following the directions from here: http://pysftp.readthedocs.io/en/release_0.2.9/cookbook.html
I was having a hard time gettin… Continue reading What are the risk of NOT using a host key for SFTP using pysftp?
I’m attempting to set up an SFTP Server for our company. From what I was reading, regarding sshd_config, if I have several “Match group” directives, a user can match multiple of those to be able to access both sets of folders… Continue reading SFTP Group based access control
I’m attempting to set up an SFTP Server for our company. From what I was reading, regarding sshd_config, if I have several “Match group” directives, a user can match multiple of those to be able to access both sets of folders… Continue reading SFTP Group based access control