Tag Info

New answers tagged

2

Throw out < 2048 bit builtin moduli On the server: Have a look at your sshd_config and throw out the diffie-hellman-group1-sha1 if it appears in the KexAlgorithms section. And restart SSHD. Check with Nmap how can I test if that is good enough? Get Nmap and run the `ssh2-enum-algos' script against the SSH server. The diffie-hellman-group1-sha1 ...


3

The same exact rules apply to webcams as in the thread you referenced. If you put your webcam on an obscure port (not just 8080 or a common variant) then Shodan will not find it while crawling. If you keep your webcam protected from anonymous access (set unique user/pass settings for all accounts on the cam) then outsiders will not be able to see it even ...


1

Short answer: don't touch these. Long answer: Setting an ACL - ANY ACL in ANY file system, is a security decision that involves trade-off. In order to decide what the "correct" ACL to use is, you need to consider what the use of the protected objects will be. This means you need to consider either a typical usage (for "default" ACLs) or a specific case ...


1

No such thing I don't think that there is an official, Microsoft-supported way of doing this. Here's an MS blog post that urges users to only use official hardening methods (namely Security Compliance Manager and Security Configuration Wizard) (And AFAIK even those two don't touch the NTFS ACLs at all.) Microsoft TechNet, Premier Field Engineering (PFE) ...


0

First and foremost, have you contacted tech support? If there's a forensics investigation to perform you should not meddle with your server but flag it and let them do their digging. Secondly, assuming tech support doesn't want to or cannot help, the fact that you got the notification on day X does not imply that the mount happened on the previous day. From ...



Top 50 recent answers are included