New answers tagged

0

What is the advantage of using jump servers for security reasons? Jump servers, or more accurately, bastion hosts, provide a segregation layer between the target network and the user. Consider a network with database servers, application servers, an HSM or NAE for PCI, and monitoring systems. Without a bastion host, this needs to be exposed for maintenance ...


0

What is the advantage of using jump servers for security reasons? My understanding of this is in general is that it allows you to minimize vulnerable and important attack surface and make an attack harder. This is because you can move towards white listing ips (you can white list the jump boxes). This would essential be like requiting authentication to have ...


0

For Linux and Unix systems, I suggest creating some sort of regurgitated state every 24 hours via a platform such as -- https://fogproject.org -- which works via PXE boot (probably would help to understand scripting and cronjobs). Basically, set up a bunch of machines (virtual or not) and have them kick off a new baseline image once a day. For a scoring ...


4

If someone has physical access to a machine, the root password is no longer a protection. Among things that can be done (from simpler to harder): interrupt a boot sequence. Some systems directly open a shell with root account without asking for password in order to allow the operator to try to recover manually after a major disaster (lost of password file, ...


1

Your account may have been brute forced. This is when someone writes a script to (not manually, automatically) try all combinations of usernames/passwords up to a certain length. For example, one alogrithm my start out with a then go through z then try aa, ba, ca, ... za, ab, ac, ..., zz for usernames length up to a certain number. Some/Most brute-forcers ...


4

You cannot force an arbitrary email server to send an email to you. But it might be possible in specific setups. The easiest case is if the servers allows relaying because then you can simply address the mail to you. If you have login credentials you might try to authorize against the server and send a mail to you, because most servers allow authorized ...


0

If you're just looking for header info you can try the SMTP server test on wormly.com. It tries to use the target mail server as a relay for a message. It will probably fail if relaying is disabled, but there may be some information disclosure that may help. Additional sources and methods for gathering information regarding email servers are: Passive ...


0

It's been awhile since I've played with this and it can be distro specific but try looking in /etc/issue as mentioned here.


-1

It's a classic for a reason: Your post advocates a (X) technical ( ) legislative ( ) market-based ( ) vigilante approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was ...


2

OAuth is like any other auth scheme with regard to its functional purpose. You send creds to it, and it returns user info (even if it's only success/fail messages). Usually a standards based auth server is used by multiple applications so you really want it isolated to it's own functional domain, code base and host. You don't want changes made to an ...


4

This depends a lot on the setup of this site. If there is no DOS protection at all than it is probably not possible for an attacker to block others from accessing the site while still having access. The attacker might of course try to hack the site and configure a firewall or require authorization so that everyone else gets blocked. If there is some dumb ...


1

In theory, yes. You'd need to disable IP forwarding so the data doesn't pass through the attacking machine. You'd need to forward the client's download request and then intercept the download as it bounces off the attacker. Once you have this file, modify it as you wish and send it to the victim while spoofing yourself as the server. NOTE: This process ...



Top 50 recent answers are included