Questions tagged [security]

Preventing a system from unauthorized access, modification, disruption, or destruction.

23 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
44 views

Google Chrome anti-virus checks take too long for downloads from our site. Can it be bypassed or sped up?

I host a windows software website. I noticed that new version of Google Chrome checks downloaded files presumably for viruses and it takes about 10-20 seconds to complete. Is there any way to white ...
2
votes
0answers
78 views

rel=“noreferrer noopener” in target=“_blank” external links

In numerous sites I have been reading, they say that you must use rel="noreferrer noopener" when using target="_blank" within external links. I can understand why you should use noopener as a ...
2
votes
0answers
39 views

Can many single page hits from a variety user agents from the same VPN with the same screen resolution be hurting my search rankings?

I am trying to clarify what is happening with the traffic on my site. Lately I am being flooded with many strange hits, mostly from US and they seem to only open 1 page or visit for few seconds. The ...
2
votes
0answers
20 views

Assessing TLS capabilities by examining user agent strings from log files

I have a long list of browser user agent strings pulled from website access logs which I would like to analyze to determine the TLS capabilities of our site's visitors in order to get a ballpark ...
2
votes
0answers
53 views

Amazon EC2 and CA-signed certificate with LAMP stack

I have an EC2 server set up, using the free trial. I have installed my LAMP stack and the docs urge me to get SSL going. Using yum, I installed ssl with the mod24_ssl package. Currently I can put the ...
1
vote
1answer
40 views

Best way to handle email address for use with domain registration?

I have registered a domain that I use exclusively for email. In addition to my main email address (foo@example.com), I have companyA@example.com, companyB@example.com, justforfriends@example.com, etc....
1
vote
0answers
83 views

Are Google API Key Application Restrictions Secure?

I believe an IP address or HTTP referrer can be spoofed, so can I trust that IP address or HTTP referrer application restrictions (configured via the Google API console) will prevent unauthorised ...
1
vote
0answers
24 views

Does cPanel pass along security updates from installed software (Mediawiki, WordPress, etc) in a timely manner?

I have an account with a bare-bones cPanel based web-host and I'd like to run a CMS from this account. (MediaWiki or WordPress. I've not decided yet. I hope that doesn't matter for this question.) ...
1
vote
0answers
32 views

Identify a user agent consuming massive bandwidth downloading and uploading specific files but never sending a referrer

Blank HTTP_REFERER user agents are downloading and uploading a couple specific files to and from our server! This is causing HUGE bandwidth and CPU usage. We blocked blank referers on our CDN and ...
1
vote
0answers
557 views

Append basic authentication header NGINX to existing authentication header of upstream application

Assume the following setup: The NGINX reverse proxy is asking for basic authentication (which is a good habit when you expose things on the internet). Basic authentication uses the Authorization ...
1
vote
0answers
31 views

Can dbadmin be secured under nginx by using a rewrite rule to a 404?

I'm trying to redirect all 404 pages to a custom handler with NGINX. I spent few hours to made the following rewrite in nginx but my question is: can it be a security breach? location ~ ^/(?!(dbadmin)...
1
vote
0answers
33 views

Deterministic hash function without storing secret keys

I am developing an application that allows users to post things anonymously yet comment on posts with their name and profile picture. I want to create a method of data storage that makes it impossible ...
1
vote
0answers
335 views

Self-hosting and Apache virtual host on a Synology NAS: any security risk?

I have a Synology NAS running an Apache web server with several Virtual Hosts. Currently, each vhost is associated with a different port, and my router is pointing on them individually. I also have a ...
1
vote
0answers
192 views

Odd Apache Request “GET /shell?echo+jaws+123456;cat+/proc/cpuinfo HTTP/1.1”

I've been looking into an issue with my servers, and while looking I found this weird request in the Apache Access Log GET /shell?echo+jaws+123456;cat+/proc/cpuinfo HTTP/1.1. This ended up returning ...
1
vote
0answers
66 views

Are there security concerns with migrating a sub-sub domain to a new platform, leaving another in place, and abandoning a third?

I have been tasked with launching a website for my organization. It is a dept. within a parent organization. Parent Organization Administers domain.com Dept. Organization Administers sub.domain.com ...
1
vote
0answers
328 views

Is it able to disable secure attribute for Cookie on SSL connection?

There are HTTP and HTTPS page on our site on Apache. So We need to convert from HTTPS to HTTP or from HTTP to HTTPS to prevent from login session cookie fired. I already know that it does not make ...
1
vote
0answers
36 views

What is infecting these networks between 10/25/15 and 11/1/15?

Just noticed a fancy new graphical threat dashboard in the Google malware scan systems. There seems to be a cleanup then subsequent spike in infected sites across various [less-than-high-quality] ...
1
vote
0answers
405 views

Possible to leave proc_open() enabled on a shared host?

We are working on a PHP component that requires proc_open() for it to work. Because of this, we have trouble running on common shared hosts because proc_open() together with other functions like exec()...
1
vote
0answers
47 views

Security and Apache Methods

I occasionally get annoying POST requests but one lately caused a 500 error. Not a biggie really, but it got me thinking. My site does not have but one form. Outside of this, POST should not exist ...
1
vote
0answers
60 views

How to clean PmWiki from JS:Includer-AWG and protect my site from future infections?

I'm hosting a site for an NGO for several years now. The site seems to be based on a PmWiki backend. I don't know much details because I'm just hosting the site and I'm not the guy who set it up. I ...
1
vote
0answers
139 views

Atlassian Confluence batch.css blocked by CheckPoint R75 firewall

Our internal firewall is blocking Confluence's batch.css. The error message is: security scanner detected I know that batch.css is made from all other CSS files. I found that icons.css and icons-...
1
vote
0answers
511 views

IIS Not Accepting Active Directory Login Credentials

I have an ASP.NET web form using Microsoft's boilerplate Active Directory login page, set up exactly as suggested. Windows Authentication is activated on the "Default Website" and "MyWebsite" levels, ...
0
votes
0answers
25 views

Invalid traffic coming from Sogou

I have not indexed my website in Sogou. I have only very less visitors. But i am getting traffic from Sogou daily. The search keyword is "site:mywebsitename" and is from China. Just visiting main page....