Tag: Security

All the articles with the tag "Security".

• Public Key from Private Key

  3 Jan, 2019

  I fall over this every so often. I have the private key file but would either have to trawl servers for authorized_keys files to get the public password or

• RADIUS Testing

  Updated:7 Nov, 2018

  We have a need to authenticate a couple of devices via our Wifi access points with a RADIUS server. Right now I wanted to test things out using a MAC addre

• Azure IPSec VPN Ups and Downs

  Updated:31 Jan, 2018

  Following our IPSec connection setup for Azure and the Juniper SRX we were seeing regular disconnections and a failure to re-establish a tunnel for extende

• Sophos Mobile Control EAS Proxy

  Updated:25 Jan, 2018

  Up until this week we've been able to get away with a very simple SMC installation that proxies Exchange ActiveSync (EAS) from the one server with the base Sophos Mobile Control program without using a Standalone EAS Proxy.

• Mysql Broken After Apt Upgrade

  Updated:18 Jan, 2018

  My local install of mysql-community-server decided to fail today after applying some updates. I'm running Debian buster/sid so these kind of things are to be expected. But this was a totally new one to me.

• Java Keystore Management

  Updated:14 Nov, 2017

  In the process of getting a new queue management system installed I discovered they're using HTTP and not HTTPS. As part of out security process I had to r

• Tomcat and HTTPS

  Updated:28 Sep, 2017

  By default Tomcat gets installed with HTTP only and a number of default applications. Previously I linked documents on how to secure Tomcat . But put simpl

• Windows, Apache 2.4 and OpenSSL

  22 Sep, 2017

  In order to make Apache 2.4.27 compliant it needs the later version of OpenSSL v1.1.0. To get this you need to install the VC15 version. The VC11 etc. do not include the later OpenSSL and fail because they are compiled with v1.0.2

• Apache 2.4 TRACE - Nessus plugin 11213

  Updated:21 Sep, 2017

  If you're using Apache 2.4 then there is a config TraceEnable directive that you should use to simply turn off the TRACE method.

• SMB Insecurely Configured Service

  Updated:17 Aug, 2017

  For the first time today I ran into Nessus plugin ID 44676. It highlighted an "insecurely configured Windows service". This related to a Service Discretion