Questions tagged [remote-server]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
48 views

ssh authentication: is it possible to have password OR keys?

I'm wanting to use hashbackup to backup one server (A) to another server (B). Hashbackup can send the backup to server B, if server A has server B's key (public?) for passwordless ssh. I haven't used ...
user avatar
0 votes
2 answers
164 views

Secure way to set up GitHub repository in shared remote machine

I have access to a shared remote machine to execute code and store data, accessible through SSH from my local machine, but I do not have root privileges there. The remote is shared among many users. I ...
user avatar
1 vote
2 answers
226 views

Can a system be remotely controlled in GUI without you seeing it?

For instance: opening your web browser, opening your already logged in google account and checking your location history. If someone were doing this over RDP you'd be able to see it happening but is ...
user avatar
  • 11
0 votes
0 answers
94 views

What are my vulnerabilities with this multi-user ACL database approach?

I would like some expert insight. I want to know what my vulnerabilities for this model are. This is a demo project that I will be following in my production app if all works out securely. My ...
user avatar
  • 117
2 votes
1 answer
3k views

Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?

I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
user avatar
  • 123
6 votes
5 answers
5k views

Why doesn't a simple HTTP request to display a remote web page violate the same-origin policy?

On a W3Schools page, I found that HTTP requests work like this: A client (a browser) sends an HTTP request to the web A web server receives the request, and runs an application to process it The ...
user avatar
0 votes
2 answers
107 views

Store cookies for multiple sites on remote server and connect from multiple clients

Would it be secure to: Store all my website cookies (stack sites, webhost, github, web-based email, etc) on a remote server (using an customized open-source VPN or something) Login to the server with ...
user avatar
  • 105
0 votes
1 answer
434 views

Direct access to clients behind NAT [closed]

We have a client/server application which we set a port for both server and client to listen to and then enter a list of clients as IP (Host)/Port pair in the server's admin panel for monitoring ...
user avatar
-1 votes
1 answer
1k views

Why is Google Remote Desktop not detected by company?

My company has been applying really strict information security policies with firewalls and good quality network equipment this is to prevent from someone to connect to the company network. Many of ...
user avatar
  • 559
0 votes
1 answer
1k views

What's the safest way to make home server available from outside the network?

I have an old laptop that I decided to use as a server, with some samba shares and whatnot (making available some dvd rips and the like), and I'd like to be able to access the files in it from not ...
user avatar
  • 3
1 vote
1 answer
334 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
user avatar
  • 1,204
0 votes
1 answer
451 views

How can Remote Code Execution in Unity infect me?

There is a Remote Code Execution Vulnerability in Unity, it sounds like a vulnerability that someone can infect you after they trick you click something, I guess. So assume I hadn't installed the ...
user avatar
-1 votes
1 answer
246 views

Windows Remote Desktop access modes and security/functionality? [closed]

What are the security implications of running a Windows RDS farm vs. just using RDP for remote administration?
user avatar
  • 33
0 votes
1 answer
74 views

What are design and security considerations for a site that connects to its users' own dbs?

I'm envisaging a website where a user signs up, has their own database running somewhere, then provides credentials to the website so that website can access that database. For example, if I was the ...
user avatar
1 vote
1 answer
121 views

Access from external network safely to raspberry

I am implementing a home alarm system with raspberry and I need to access it from the external network. The initial idea was to use cascade VPN and ssh (in my university to connect to the cluster I ...
user avatar
  • 11
3 votes
1 answer
180 views

To workaround a FreeBSD ACL bug I need to grant "read attributes/ACLs" to untrusted Samba users. Not happy about security - can practical harm result?

I've found either one, or more than one, bug, in ACL evaluation, when running Samba on FreeBSD. I can't be sure if these are facets of the same bug or related bugs - they're very similar but do have ...
user avatar
  • 1,664
2 votes
1 answer
318 views

What are the loop holes in SSH tunneling?

I am working on React web app build on my local PC at port 443, and I want to make it accessible via internet for testing purposes. One solution that I came across was SSH remote port forwarding as ...
user avatar
0 votes
1 answer
611 views

How dangerous is it to allow local connections to remote selenium servers?

There are services like BrowserStack or Sauce Labs that help with testing and test automation on different browsers and devices. But, in order to solve the problem of an application under test being ...
user avatar
  • 1,505
2 votes
2 answers
330 views

Suspicious url in redis key value

When i put keys * for getting all pairs, one key have named as crackit Then i use below command to get its value get crackit its shows the below url, which looks suspicious. /usr/bin/curl -...
user avatar
5 votes
1 answer
306 views

Harden root remote access

I'm trying to find a good method for hardening a server while allowing automated remote management via ssh (ansible). The popular choice is login with a normal user and then use sudo, but this has ...
user avatar
2 votes
1 answer
573 views

Encrypt files securely on remote server?

Let's suppose I have a rented VPS hosted somewhere in the world. Considering that I don't have physical access, I'm interested in some method that would allow me to encrypt data on the server without ...
user avatar
0 votes
2 answers
1k views

Setting up communication between internal database and hosted web server by third party

I am trying to figure out the best and most secure way to do this, if it is possible to do it safe and secure. Small company. We have a hosted web server from a third party that serves our client web ...
user avatar
  • 223
5 votes
1 answer
6k views

How secure is NAS server in LAN (wi-fi enabled)?

I've seen this question about NAS security over the Internet and I'm wondering how safe the thing is in LAN? I'm planning on replacing my old, desktop Windows-based PC with a NAS, I was thinking ...
user avatar
1 vote
1 answer
248 views

Remote server questions

I apologize for the lengthy questions and my lack of knowledge on this issue. I work from home using my own computer and connect to a remote server. I know my employer monitors my work when ...
user avatar
0 votes
3 answers
1k views

Why is accessing a remote database a security risk?

I recently wrote a small PHP script to get users that are online in my application, which uses MySQL and is hosted from my dedicated server. I use a popular web hosting company and had trouble ...
user avatar
  • 777
3 votes
2 answers
188 views

What is a proper way of destroying data remotely?

After watching a Defcon talk about data destruction, I became interested in the subject of how I would go around remotely destroying all my data on all my systems. I got to a point where I figured ...
user avatar
2 votes
1 answer
2k views

how to access freenet on a remote machine from android

The goal is to use freenet on non-rooted android devices. It is far out of my capabilities to actually port Freenet to android, but I am attempting to use and provide a functioning solution for ...
user avatar
1 vote
1 answer
2k views

How secure is it to use ODBC Driver with SSL

When Connecting from clients (such as Windows) to remote databases such as (MS-SQL Server), it is usually advised that this connection be via a service that runs on the database server. It is ...
user avatar
  • 185
0 votes
1 answer
160 views

secure ways to prevent access to an application by more than one person at a time?

If an application is licensed in such a way that is set up for one user, on one computer, how can I secure it? Even if locking into one computer, how could you prevent the computer from being ...
user avatar
0 votes
2 answers
2k views

How risky is to to use external DNS servers? [closed]

My infrastructure doesn't have an internal DNS server, so I just forward any DNS request to external DNS servers by iptables rules. I wonder how risk that can be, and how easy is it to spoof DNS or ...
user avatar
  • 133
3 votes
2 answers
926 views

securities concerns about calling REST API from multiple servers

There is a master web application that needs to call REST APIs from servers of other applications. I can think of two ways to achieve it: a). call APIs on the front-end of the master application(...
user avatar
  • 131
17 votes
2 answers
10k views

Securing MySQL server from remote connection

I need to open the port for my MySQL server to the outside and from what I read, the default configuration is not secure nor encrypted. For that, I have a few solutions in mind with their reason but I'...
user avatar
  • 2,649
0 votes
1 answer
213 views

Can the latest glibc DNS vuln be tested on remote servers?

I recently heard of the critical DNS vulnerability in glibc that can lead to arbitrary code execution. I hadn't found much about the cases when the faulty function is called and ways to remotely ...
user avatar
  • 6,514
-1 votes
2 answers
566 views

Linux kernel security bugs and hardening Ubuntu? [closed]

I recently read some article about the linux kernel having vulnerabilities, I can't recall exactly where. Being new to linux, do you guys have some references on how I should prevent remote access to ...
user avatar
  • 101
5 votes
5 answers
743 views

Avoid unauthorized updating of online leaderboard php/sql [duplicate]

I am developing an offline web app (game) for android using cordova (phonegap). The leaderboard of the same is maintained online in my server. Currently this is how the leaderboard is updated Step 1)...
user avatar
3 votes
1 answer
5k views

Run NetCat as bat file instead of exe

I need to run a netcat on a remote lab machine. I can execute remote commands through the browser with Administrator rights (because of the application vulnerability) but I don't have access to the ...
user avatar
  • 233
1 vote
1 answer
6k views

How to remote access a server behind firewall? [closed]

I have a server with defined IP address (it is for my own usage). I would like to use it from remote access. The server is behind a firewall. Is there a way to access it from remote computer? Is ...
user avatar
  • 553
4 votes
1 answer
1k views

Is the ssh-copy-id command secure?

I have 2 Ubuntu 14.04 servers with openssh-server installed on both. I've set up key-based authentication using RSA keys, without passphrase, so that I can run automated backup scripts, to a remote ...
user avatar
  • 167
4 votes
1 answer
151 views

How does one typically monitor their privileged admins encrypted SSH & RDP sessions?

From a compliance (& perhaps just for pure due-diligence) standpoint, what do IT departments typically deploy to keep an eye on their privileged administrator's remote access sessions? Also what'...
user avatar
0 votes
1 answer
165 views

PCI SAQ C 1.2.1, 1.3.5 and remote server/software

I'm hoping someone here can help me. I'm attempting to get the small nonprofit I work at PCI compliant, as we have been paying an additional $20/month in noncompliance fees to our processor since we ...
user avatar
2 votes
1 answer
2k views

Remote Administrative Access to a server, KVM over IP or HP iLo?

We have a situation. We want to grant remote administrative access to one of our servers for clients. As I know, there are two possible ways: 1- KVM-over-IP and 2-HP iLO. The most important thing for ...
user avatar
  • 153
1 vote
1 answer
3k views

Does MITM attack work across Remote Systems?

I have question about if MITM works across remote systems? Often, I'm doing internal penetration test, but I'm not sure about how to do MITM attack when I am outside from that network. Does classic ...
user avatar
  • 62
1 vote
2 answers
170 views

Potential dangers of re-locating critical systems to cloud

It was suggested by some consultants that We relocate some of our critical systems in our environment to cloud base architecture. Besides knowing the fact that on a cloud base architecture we have no ...
user avatar
  • 705
0 votes
2 answers
164 views

Remote administration methods

There is a requirement for users to remotely access one of my corporate servers from internet. Policy wise, i would want them to at least use 2FA for communication,eg VPN Tokens, password+SMS etc. ...
user avatar
  • 705
0 votes
1 answer
177 views

User-friendly public/private manual authentication protocol

I have a remote service which allows users to SSH login to the machine and they're automatically sent to the (command line) application (without access to a bash prompt, for instance). In the course ...
user avatar
  • 137
1 vote
1 answer
7k views

SFTP between guest virtual machine and its host

The System I am using Windows 7 host with Cygwin and a virtual machine running Linux. The actual running guest is an Arch Linux ISO. The Objective I want to share files between the Cygwin host and ...
user avatar
  • 835
1 vote
4 answers
647 views

Authentication with an untrusted server

I asked a related question earlier, but I want to ask a broader version this time: To simplify things let's say I've developed an application that allows users to send messages in a chat room, and to ...
user avatar
0 votes
2 answers
140 views

Only allow access to specific service running on computer in Demilitarized Zone over internet

If a computer (running different services such as ftp and ssh) is placed on a Demilitarized Zone, will all of its services automatically be accessed by anyone on the internet? If the answer is yes, ...
user avatar
2 votes
2 answers
561 views

How to protect iKvM, IPMI, KvM Interfaces from 0day and other exploits

In REF to http://threatpost.com/ipmi-protocol-bmc-vulnerabilities-expose-thousands-of-servers-to-attack and the hacks of several companies and web hosts have been hit and had their servers wiped from ...
user avatar
  • 3,086
0 votes
1 answer
248 views

Remote Desktop over VPN to access other VPN

My current situation is: Site 2 can connect to site 1 via VPN. I'm on site 3. IT at site 1 doesn't allow creating a new VPN to site 1. I'm thinking of using a Remote Desktop via VPN from site 3 to ...
user avatar
  • 103