Preventing a system from unauthorized access, modification, disruption, or destruction.

learn more… | top users | synonyms (1)

3
votes
1answer
51 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
1
vote
1answer
26 views

Allow third party to use domain subdirectory without risk to your server

If you have a live site on example.com, is it possible to allow third-parties to set up their own site at example.com/project1, example.com/project2 etc without subjecting your server to risk? I ...
1
vote
1answer
88 views

Use GPG keys in cPanel?

So, the cPanel web hosting management console has a GnuPG Keys area, which allows you to create or import GPG/PGP keys. However, it doesn't seem that the server actually does anything with them once ...
1
vote
1answer
64 views

How to setup an implicit FTPS encryption on cPanel server?

Currently my server is configured to use TLS encryption for FTP. It is explicit since it uses FTPES and on port 21. How can I switch to implicit FTPS that works on port 990? I'm using Pure_FTPd. I ...
1
vote
0answers
3 views

.CA Domain registratrs for DNSSEC

We have a .ca (CIRA) domain that currently uses DNSSEC through the ISC DLV registry service. We are aware that DLV is shutting down by 2017. We have communicated with CIRA respecting .ca registrars ...
1
vote
0answers
40 views

Suspicious Web Traffic from Amazon.com ISP

Just a few hours back I was checking my logs when I found a whole bunch of traffic from IP address 54.174.xx.xx and ISP Amazon.com (validated from Google analytics). It lasted for an hour and then ...
1
vote
0answers
31 views

What is infecting these networks between 10/25/15 and 11/1/15?

Just noticed a fancy new graphical threat dashboard in the Google malware scan systems. There seems to be a cleanup then subsequent spike in infected sites across various [less-than-high-quality] ...
1
vote
0answers
79 views

Another Google-Based Test/Referrer Hitting Our Site, This Time it Hints We are a Test “Fuzz” Case

Noticing today that there is yet another strange visitor hitting our server/site from a Google IP. It came via a path to an old image that was never linked out to my knowledge. This disturbs me ...
1
vote
0answers
35 views

Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key

Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? Id like to know what impact on performance it has, if Im choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
1
vote
0answers
32 views

Security and Apache Methods

I occasionally get annoying POST requests but one lately caused a 500 error. Not a biggie really, but it got me thinking. My site does not have but one form. Outside of this, POST should not exist ...
1
vote
0answers
17 views

White labelling with frames and IE

I have a SaaS application that offers some basic white-labelling functionality related to CSS, company logos etc. However, one client now wants to white-label the application with their own URL so ...
1
vote
0answers
78 views

Restrict Plesk user for external developer access

We are commissioning an external developer to develop part of our site and he will also need access to a MySQL database attached to the domain but I can't figure out how to create a user that has the ...
1
vote
0answers
51 views

How to clean PmWiki from JS:Includer-AWG and protect my site from future infections?

I'm hosting a site for an NGO for several years now. The site seems to be based on a PmWiki backend. I don't know much details because I'm just hosting the site and I'm not the guy who set it up. I ...
1
vote
0answers
109 views

Atlassian Confluence batch.css blocked by CheckPoint R75 firewall

Our internal firewall is blocking Confluence's batch.css. The error message is: security scanner detected I know that batch.css is made from all other CSS files. I found that icons.css and ...
1
vote
0answers
270 views

IIS Not Accepting Active Directory Login Credentials

I have an ASP.NET web form using Microsoft's boilerplate Active Directory login page, set up exactly as suggested. Windows Authentication is activated on the "Default Website" and "MyWebsite" levels, ...
0
votes
0answers
27 views

What file permissions should I set before I give website project folder to hosting service?

I am using a CMS called Jekyll to build a website. My understanding of jekyll at this point is that it helps me to generate static web pages by providing me a simple boilerplate for a website and ...
0
votes
0answers
34 views

Does Cloudflare use different authentication mechanisms across platforms?

I'm using Cloudflare flexible SSL for a website I made, and after investigating certificate properties, I realized different authentication mechanisms are being used. Chrome 45 for Windows desktop ...
0
votes
0answers
28 views

What kind of attack causes a JavaScript 'out of memory' on the attackers device?

We experienced a strange attack yesterday. Our error log picked up the same 'out of memory' JavaScript error from a single IP address every 10 seconds. The requests came from 6 client ports on the ...
0
votes
0answers
39 views

Possible to leave proc_open() enabled on a shared host?

We are working on a PHP component that requires proc_open() for it to work. Because of this, we have trouble running on common shared hosts because proc_open() together with other functions like ...
0
votes
0answers
41 views

Security in MVC code-first entity framework

I am new to ASP.NET MVC and to Azure (in which our application will be hosted). And I am new to security in general. So I'm wondering how secure the use of code-first entity framework in asp's ...
0
votes
0answers
35 views

SSL Certificate issue: “doesn't have public audit record”

After renewing ssl certificate in our website, there seen "doesn't have public audit record" What is mean by this dialogue? Is it make any problems in websites security and how can i overcome this ...
0
votes
0answers
18 views

CGI/FastCGI does not prevent me from reading other users files

I installed mod_fcgid.so for Apache to run every script under its user account. I looked at PHPinfo to see if it is loaded, and it is OK. Now when I try to read file content that belongs to another ...
0
votes
0answers
82 views

Framekiller and google rankings

This is the javacript code that I use to prevent clickjacking in my current project. <style id="antiClickjack">body{display:none !important;}</style> <script ...
0
votes
0answers
323 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...