New answers tagged

2

They obviously changed the rules to stop the hackers Chain DENYIN sole purpose is a blacklist of ip addresses. Obviously, this list was derived from the log files as the sources of the attack. Chain DENYOUT Clearly is meant to log and drop outbound connections to the attacking list of IP addresses. Just in case they are still in the system. Chain ...


1

It depends on the application, but generally it is "yet another factor that must be taken into consideration". In addition to checking the content and type of uploaded files, saving uploaded files outside of web server's executable directories and a multitude of other necessary precautions. For detailed information refer for example to the OWASP article on ...


0

I guess it all depends who owns the file/who runs the upload file... if is a malicious file and root runs it.. then no matter what permissions you have you are screwed :) but I will use 750 if I was you. Also you can try to chroot your app, and that directory.


0

As schroeder mentioned, you may have neglected some detail here, which makes your security group nervous. There are a number of classes of attack the security group may be concerned with. Just a few for example that might be worrying them: File Upload - you don't mention how this is handled. Some questions to consider - Is there enough temp space on ...


0

First: you are correct that the image would need to be processed, and that the server should only store and supply the file to the client requesting it to render (it is typically not the server that renders it). But, I do not know how your system handles uploads. Second: what if your server does process uploaded images, and someone uploads a AIX virus? No ...


1

Question is strange, but here is an alternative approach. Sure you can keep your machine clean 100% of the time. Create a virtualized hardened host, take a snapshot, do your work, send your work, close virtualized host. Never use the host for ANYONE, not even connecting to the Internet, you could save your work on a USB send it from another machine. When you ...



Top 50 recent answers are included