Tag Archive for 'security'

Verifying Private Key matches a Certificate

Certificate

If you get a certificate from a customer and you should implement it in some piece of software (for example nginx). The first step is to compare the received files.
After this check the displayed hash should Continue reading ‘Verifying Private Key matches a Certificate’

OpenRelay

Introducing of two different examples to check your E-Mail-Server for an open relay.
Open relay is an E-Mail server configured in such a way that it allows anyone Continue reading ‘OpenRelay’

Time Machine Backup to Samba

Time Machine is a backup utility developed by Apple. It is included in Mac OS X since MAC OS X version 10.5 alias “Leopard”. The software is designed to work with the Time Capsule as well as other internal or external drives.

Only with this trick Continue reading ‘Time Machine Backup to Samba’

phpMyAdmin blowfish_secret




After login into phpMyAdmin panel I get this error message[1]

Everything work fine I can manage everything, but if security is important for you, you should look at the solution. Continue reading ‘phpMyAdmin blowfish_secret’

Knock Knock

SSH is by default very strong, and since a long time without critical bugs. It has strong protection against various hacks and known vulnerabilities. For instance SSH has a password retry wait time of (default) five seconds. This makes the time for brute force attacking an SSH-server very long and not effective. However, sometimes script-kiddies will fork their hacking program making multiple processes of the brute force attack. Sometimes they are able to fork it off upwards of 1000 attempts every 5 seconds. This drastically minimizes the time to crack short passwords.

I think SSH is secure enough, but there is always a way to make it more secure.

Install knock daemon:

1
aptitude install knockd

Continue reading ‘Knock Knock’