225 reputation
18
bio website dreamtby.me
location Portugal
age 27
visits member for 4 years
seen Sep 8 at 15:21

building awesome stuff.


Jul
25
comment Whistleblowing, business ethics and credit card data
Sorry for the unproductive comment, but thank you for caring enough about this to act upon it!
Jul
20
comment Security policy for system administrators
I have a friend who graduated from there, I believe. I'll see if I can make him look at the "finished product" then :) Thanks for the tip.
Jul
20
comment Security policy for system administrators
Thanks, that's exacly the point :)
Jul
20
comment Security policy for system administrators
I trust my replacements completely both on ethics and skill, that is not why I want to do this. It's just that since now the team has grown (it was just me and now it's 3 people) I think it's the time to start creating policies and standards in this department, to create room for growth and to ensure everyone's on the same page, so to speak. Yes, the company has policies in place in other departments.
Jul
20
comment Security policy for system administrators
Great answer, this really helped me make sense of how to start and break it down into actionable stuff and set direction. Could you perhaps mention the class you took?
Jul
20
comment Security policy for system administrators
An excellent starting point. Is it usual to split policies by "areas" (ethics, internal lab security, etc) as shown there? I was under the impression this would be just one document with all the information in it.
Jan
13
comment Given SSH access, what should I do to protect a server and monitor (dangerous) user actions?
Only the two virtual servers they have access two. I'll edit the original question about that.
Jan
12
comment Given SSH access, what should I do to protect a server and monitor (dangerous) user actions?
I think I'll look this up, never heard of exploiting it and looks like a good tip.
Jan
12
comment Given SSH access, what should I do to protect a server and monitor (dangerous) user actions?
I wasn't aware that sshd was chrootable, never seen it setup like that nor ever did it that way. Thanks, +1 if I could :). I have tripwire on the critical system files and sudoers only allows the system administrators.
Jan
12
comment Given SSH access, what should I do to protect a server and monitor (dangerous) user actions?
Yeah, perhaps it's too broad and I should split the question? My main concern is privilege escalation as I have other things in action preventing tampering: tripwire, correct perms, users partition mounted with no suid.. I'm looking for ways I can protect (read: mitigate risks) on such an open system: shell+compiler.