orokusaki

135 reputation

bio	website	nuovolabs.com
	location	Jupiter, FL
	age
visits	member for	2 years, 5 months
	seen	May 15 at 13:46
stats	profile views	3

I am a Python / Django developer. I specialize in developing SAAS applications using Django. My language of choice is Python, but I am sometimes forced to use English. Django rules.

	135 reputation	bio	website	nuovolabs.com	visits	member for	2 years, 5 months
6 badges		location	Jupiter, FL		seen	May 15 at 13:46

summary answers questions tags badges favorites bounties reputation activity

23 Actions

suggestions reviews revisions comments badges posts accepts all

May 15	awarded	Commentator
May 15	comment	Securing my firewall (both dedicated and iptables-based) Aha, excellent. Thanks for the extra info!
May 14	comment	Securing my firewall (both dedicated and iptables-based) Thanks so much! Btw, 1) do you mean that "POLICY (-P)" at the bottom of my rules has the exact same effect? And, 2) (regarding VPN port 22). My understanding was that if I VPN into a private network, and SSH into my server, I'll be gaining access due to the fact that my firewall allows VPN traffic on port 22. My server is set up to not care either way (I have SSH "hardened"), but for added safety, port 22 traffic is not allowed on the public network. Did I state that all correctly, or is there a bigger picture I'm missing? Also, if iptables blocks a lot of requests, will my logs grow huge?
May 14	accepted	Securing my firewall (both dedicated and iptables-based)
May 14	asked	Securing my firewall (both dedicated and iptables-based)
May 6	comment	What is the most successful attack vector? I would have loved to see an answer here, and I think it's a very valuable question to answer. If you could definitively answer "brute force password attacks make up 68% of all attacks that result in more than $1000 of damage", for example, that would teach newcomers the value of password strength (or public/private keys), and maybe get them to enforce standards more strictly, etc. Or, for me, I wonder what sort of software is most often attacked (web server, SSH, etc.), so I know which of my packages to spend the most time hardening.
May 6	comment	Securing the security guy's home office: what should we do? @TildalWave - oh, sorry mate. I was just making sure. I think a few of the commenters thought it was a serious answer.
May 6	comment	Securing the security guy's home office: what should we do? @TildalWave - if you actually think this answer was intended to be serious (it wasn't - it was a joke), you might need to seek some help.
Dec 7	awarded	Scholar
Dec 7	comment	What are some steps to take for securing a Linux server that aren't in this list of obvious ones? Thanks Rook. That's good info to have. I did typo when I said `Memcached` and `Redis` would run as `www-data`, but the rest were `www-data` :( lesson learned the easy way though :)
Dec 7	accepted	What are some steps to take for securing a Linux server that aren't in this list of obvious ones?
Dec 7	comment	What are some steps to take for securing a Linux server that aren't in this list of obvious ones? Thanks - regarding your "total and complete disregard..." comment: Did you mean, because I've used `www-data` so gratuitously? Which programs should be running as `www-data`? My web application is really a combination of `uWSGI` and `Nginx`. Should both run as `www-data`?
Dec 7	awarded	Student
Dec 7	comment	What are some steps to take for securing a Linux server that aren't in this list of obvious ones? @ewanm89 - yeah, server edition. Thanks btw (for the tip on SYN packet rate limiting).
Dec 7	revised	What are some steps to take for securing a Linux server that aren't in this list of obvious ones? added 9 characters in body
Dec 7	asked	What are some steps to take for securing a Linux server that aren't in this list of obvious ones?
Nov 20	awarded	Supporter
Dec 21	awarded	Editor
Dec 21	revised	Securing the security guy's home office: what should we do? added 3 characters in body
Dec 20	comment	Securing the security guy's home office: what should we do? @SteveSyfus - you can add edit notes in the notes section when it's something minor like adding parentheses.