Tag Info

New answers tagged

0

User's Security You are missing one extremely important thing: CSRF mitigation. Be sure to fully understand the related problems. Tldr: in addition to the authorization token (e.g. session cookie), you need a challenge per action to identify if the action is intended by the user or unintended. Fix JSONP leaks. X-Content-Type-Options: nosniff, on all ...


0

Full documentation on the latest version of OSSEC is here: http://ossec-docs.readthedocs.org/en/latest/index.html The documentation is a little light and I found I had to do a lot of trial and error to get it to do exactly what I wanted. My recommendation, especially if you're new to the software, would be to download the Server Virtual Appliance here: ...


3

These shares are call "administrative shares". They are there to enable the smooth working of pretty much all network management tools. They aren't a security risk unless you explicitly make them one: by default, they aren't accessible but by an admin account and such an account and local admin accounts can only be used remotely if they have a password ...



Top 50 recent answers are included