Collaborate Disseminate
I am trying to solve vulnerability reported for QID 38909 i.e SHA1 deprecated setting for SSH. I have hardened the sshd configs in /etc/ssh/sshd_config and /etc/crypto-policies/backends/openssh and opensshserver.config. below is the ouput … Continue reading QID 38909 SHA1 deprecated setting for SSH (RHEL 8.6)
While investigating an incident involving the BellaCiao .NET malware, Kaspersky researchers discovered a C++ version they dubbed “BellaCPP”. Continue reading BellaCPP: Discovering a new BellaCiao variant written in C++
While the CrowdStrike incident is still fresh in our minds, Kaspersky experts look back on similar IT outages that happened in 2024 and predict potential threats for 2025. Continue reading Story of the Year: global IT outages and supply chain attacks
We tinkerers often have ideas we know are crazy, and we make them up in the most bizarre places, too. For example, just imagine hosting a website while pedaling across …read more Continue reading Pedaling your Mobile Web Server Across the Globe
If your Linux shell scripts are getting tripped up by SSH fingerprints, follow this concise tutorial for an easy solution. Continue reading How to Add an SSH Fingerprint to Your known_hosts File in Linux
first I noticed that there is a process named kswapd0 using 100% of 4 out of 8 CPU cores. I killed it several times and then added to /etc/sysctl.conf the line
vm.swappiness=10
After that there appeared another process named kauditd0 usin… Continue reading How can crypto miners access my computer [closed]
I just know everyone is going to shout at me that public key is better but let me spell out the actual scenario first.
I have a small LAN at home, basically I’m the only regular user but other members of the family are connected occasional… Continue reading Relative security of ssh password and public key to remote systems
I recently recalled a memory of when I had once, a fair while ago, accidentally tried to login to the wrong (mistyped) SSH server, and it allowed me access without the correct credentials: null authentication.
I thought nothing of it at th… Continue reading Could there be a legitimate reason for a SSH server to allow null authentication, to anyone?
plink.exe -v -l root -pw toor -R 445:localhost:445 <My IP>
Looking up host "My IP" for SSH connection
Connecting to "My IP" port 22
We claim version: SSH-2.0-PuTTY_Release_0.81
Failed to connect to "My IP&qu… Continue reading Error connecting to SSH through plink.exe [closed]
I have a number of RHEL 8 and RHEL 9 systems with FIPS mode enabled. I’m trying to use a crypto subpolicy to disable CBC ciphers, but the subpolicy seems to be ignored in FIPS mode even though it is applied correctly.
The same subpolicy wo… Continue reading RHEL in FIPS mode ignores crypto subpolicy