Security on Mostly Copy & Paste

YADM (Yet Another Dotfiles Manager) & Keybase

Fri, 13 Jul 2018 10:00:00 -0800

I use multiple Mac workstations to manage all my systems and services (AWS infrastructure, Kubernetes) so it is a challenge to manage the keys and…

GoLang Exercism

Sat, 23 Jul 2016 10:00:00 -0800

Not like the spitting up green pea soup exorcism but Exercism.io, one of many great resources for learning programming languages by solving actual…

Mac OS X Security Configuration Guides -Apple.com

Tue, 03 Jun 2008 10:00:00 -0800

The guides are designed to give instructions and recommendations for securing Mac OS X and for maintaining a secure computer.

Wfuzz - A Tool for Bruteforcing/Fuzzing Web Applications | Darknet - The Darkside

Wed, 30 Apr 2008 10:00:00 -0800

| Wfuzz - A Tool for Bruteforcing/Fuzzing Web Applications | Darknet - The Darkside | Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked directories, servlets, scripts, etc, bruteforce GET and POST parameters for checking different kind of injections SQL, XSS, LDAP,etc, bruteforce Forms parameters User/Password, Fuzzing,etc.

As heard on the pauldotcom.com podcast.

Maltego - Paterva: A new train of thought

Tue, 29 Jan 2008 10:00:00 -0800

These entities are linked using open source intelligence.

Apache .htaccess tweaking tutorial at Vortexmind

Tue, 25 Sep 2007 10:00:00 -0800

| Apache .htaccess tweaking tutorial at Vortexmind: free your mind | In this tutorial we are going to improve our website by tweaking out the .htaccess file. Why I wrote this article? Because on the net I have found many articles about this little beast, but every one of them dealt with a specific issue and not look at the overall usage of these files, or they are just too big when you need to do a thing in little time. So I’m trying to collect all the useful bits of data in a monolithic but slim tutorial, which will be updated as I collect more information. But first, let’s see what .htaccess file is…

SANS Technology Institute: Interview with Charles Edge

Thu, 20 Sep 2007 10:00:00 -0800

It seems like Ive been interested in security since I started playing with computers. It was always about trying to push the limits of what could be done.

macosxhints.com - OS X VPN client and Cisco ASA

Wed, 29 Aug 2007 10:00:00 -0800

Problem: A Cisco ASA or PIX firewall can be a VPN server, but a basic VPN configuration will not allow the default OS X L2TP/IPSec client to connect, even…

Terminal Services Setup Guide (2003)

Thu, 23 Mar 2006 10:00:00 -0800

| Learn the best way to batten down the hatches on your servers without going too far. | by Kenton Gardinier for ftponline.com | Windows Server 2003 Terminal Services in terminal server mode can be run in either the Full Security or Relaxed Security compatibility mode to meet your organization's security policy and application requirements. Full Security mode was created to help lock down the terminal server environment to reduce the risk of users mistakenly installing software or inadvertently disabling the terminal server by moving directories or deleting Registry Keys. This mode can be used for most certified terminal server applications. | Read more.

Top 75 Security Tools

Mon, 16 Jan 2006 10:00:00 -0800

Respondents were allowed to list open source or commercial tools on any platform. Commercial tools are noted as such in the list below. Many of the…

Block SSH script attacks

Thu, 29 Sep 2005 10:00:00 -0800

Looks like someone is trying to break into your machine and you’d be right. It’s more than likely a script or robot just knocking on your door, but you…

Email "Spamming" and Email "Spoofing"

Tue, 16 Nov 2004 10:00:00 -0800

Here is a snip of a great article explaining Virus Spoofing from www.lse.ac.uk:…

Destroy Spyware

Wed, 17 Dec 2003 10:00:00 -0800

I have yet to find an application that detects adware and spyware before it’s installed on your PC, so my recommendation is not to pay for adware/spyware…

Mac OS X Security Advisory

Wed, 17 Dec 2003 10:00:00 -0800

| Mac OS X Security Advisory | Vulnerability: | Malicious DHCP response can grant root access

| Affected Software | Mac OS X 10.3 (all versions through at least 26-Nov-2003) | Mac OS X Server 10.3 (all versions through at least 26-Nov-2003) | Mac OS X 10.2 (all versions through at least 26-Nov-2003) | Mac OS X Server 10.2 (all versions through at least 26-Nov-2003) | Probably earlier versions of Mac OS X and Mac OS X Server | Possibly developer seeded copies of future versions of Mac OS X

Securing Apache by securityfocus.com

Tue, 02 Sep 2003 10:00:00 -0800

Part one on a series of articles by the good people at securityfocus.com about creating a somewhat safe presence on the web.

Securing MYSQL by securityfocus.com

Tue, 02 Sep 2003 10:00:00 -0800

Part three and the final installment, so far, in securing your web server by the crew at securityfocus.com.

Securing PHP by securityfocus.com

Tue, 02 Sep 2003 10:00:00 -0800

Part two in the series of articles by the folks at securefocus.com about securing your web server.