Quick & Dirty Drovorub Detection
By all means read the full vulnerability report from the NSA. It has proper forensic analysis techniques and Snort rules. However, if you just want… Read More »Quick & Dirty Drovorub Detection
bill_mcgonigle
Remote Cloud Server Encryption
Imagine using a hosting provider that suddenly goes out of business. It happens, unfortunately. What an inconvenience! Now imagine that the server you were renting… Read More »Remote Cloud Server Encryption
krack attacks
Out this morning is word of a major vulnerability in WiFi security called KRACK Attacks. It allows a nearby attacker to watch traffic on your… Read More »krack attacks
Centos plus kernel for xen
Today I spent the day debugging why a database server wouldn’t boot and, eventually, removing the Redhat kernel from all of our CentOS 7 virtual… Read More »Centos plus kernel for xen
xz: Your next default compression tool
The xz compression program, run with defaults, can be so slow that you might wonder why anybody uses it. But on a modern machine, xz… Read More »xz: Your next default compression tool
rsnapshot-parallel
Today we released rsnapshot-parallel to Github. While we’ve used rsnapshot for years, recently with the proliferation of virtual machines we’ve noticed our backups running much… Read More »rsnapshot-parallel
Pardon Our Dust
We’ve recently moved to a statically-generated website for better security. The old blog posts and downloads have been imported but the comments aren’t yet loaded… Read More »Pardon Our Dust
Automatic HTTP Basic Authentication with mod_proxy
Let’s say you need to access a resource that’s protected by HTTP Basic authentication but the system you’re using doesn’t support it. Like, say, Google… Read More »Automatic HTTP Basic Authentication with mod_proxy
Multi-Port Port Knocking with IPTables
Maybe you’re tired of all the fail2ban log messages about attempts to crack your ssh passwords. Maybe you have developers who need to access a… Read More »Multi-Port Port Knocking with IPTables
Change Your LastPass Master Password
LastPass has good security, but since they’re reporting a breach on their hashes and salts, but not on the encrypted data, it’s time to change… Read More »Change Your LastPass Master Password