Viewing Category : security

Post thumbnail of Secure Delete shell script - Simple but complete
9 July 2009
Continue reading Secure Delete shell script - Simple but complete

Secure Delete shell script - Simple but complete

So I just wrote this in 2 minutes so I could kill some things in /etc and /home and be done with it. Short and simple, don’t you think?

Post thumbnail of How do you answer Secret Questions for password resets?
19 May 2009
Continue reading How do you answer Secret Questions for password resets?

How do you answer Secret Questions for password resets?

My suggestion is to come up with a system that makes sense to you. If it asks for your favorite pet’s name, maybe the answer could be “nail biting” or “chocolate lab”. You just have to remember how you translated the secret question.

Post thumbnail of Bitfrost Security Platform for the OLPC XO Laptop
15 May 2009
Continue reading Bitfrost Security Platform for the OLPC XO Laptop

Bitfrost Security Platform for the OLPC XO Laptop

The model has strong principals, but the goals blow my mind. I’ll explain in a minute, check out the principles first.

Post thumbnail of Using dd to search for strings in memory or devices
6 May 2009
Continue reading Using dd to search for strings in memory or devices

Using dd to search for strings in memory or devices

The problem is, hexdump will give you 16 ascii characters surrounded by pipes and then a newline before printing the next 16. You can’t search for long strings that way…

Post thumbnail of sha1sum mass checking for tampered files
22 April 2009
Continue reading sha1sum mass checking for tampered files

sha1sum mass checking for tampered files

You might want to do this to make sure a set of configuration files don’t get changed, or to figure out which files get changed when you build that random source code as root! (note to self: don’t make as root unless you have to, rpmbuild is bad enough!)

Post thumbnail of Bypass content filtering using Google language tools
13 April 2009
Continue reading Bypass content filtering using Google language tools

Bypass content filtering using Google language tools

This has worked for me for as long as I can remember. To get around a blocked site, as long as i’m trying to view flash or other 2.0 stuff, I just translate english pages from spanish to english. What happens is any english (which is everything) just gets passed right on, but the results come from google instead of the target site.

Post thumbnail of GPG key pairs and broken random number generation
1 April 2009
Continue reading GPG key pairs and broken random number generation

GPG key pairs and broken random number generation

Generate a gpg keypair. Check /dev/random to make sure you’re getting some output. If you dont get any standard output when you run this, ctrl-c and you will see 0+1 records in/out. This means there is a problem with your /dev/random device. Here’s the fix…

Post thumbnail of Install Bro - Network Intrusion Detection System
27 March 2009
Continue reading Install Bro - Network Intrusion Detection System

Install Bro - Network Intrusion Detection System

Install Bro - Network-based Intrusion Detection, on Fedora or Ubuntu. Bro will get installed in /usr/local/bro/ by default, unless you specified a prefix in configure as I did. I also created a bro user and group to own everything and did the make as that bro user.

Post thumbnail of Bro - Network Intrusion Detection System
26 March 2009
Continue reading Bro - Network Intrusion Detection System

Bro - Network Intrusion Detection System

Bro is intended for use by sites requiring flexible, highly customizable intrusion detection. It is important to understand that Bro has been developed primarily as a research platform for intrusion detection and traffic analysis. It is not intended for someone seeking an “out of the box” solution. Bro is designed for use by Unix experts who place a premium on the ability to extend an intrusion detection system with new functionality as needed, which can greatly aid with tracking evolving attacker techniques as well as inevitable changes to a site’s environment and security policy requirements.

Post thumbnail of How to use ecryptfs on Fedora
25 March 2009
Continue reading How to use ecryptfs on Fedora

How to use ecryptfs on Fedora

If you want to store a mix of encrypted and unencrypted files under the same area, choose plaintext passthrough, otherwise choose the default, no. I suggest an all or nothing approach, as it can get confusing as to which files are encrypted especially when they’re binary! (With ascii text files you can just cat a file and tell if it’s encrypted or not.)

 Page 4 of 6  « First  ... « 2  3  4  5  6 »
Powered by Wordpress   |   Lunated designed by ZenVerse