Security

Evaluating FTP Servers: ProFTPd vs PureFTPd vs vsftpd

/
Usually, I will try to push clients towards using SCP (via a client such as WinSCP), however inevitably there are clients who do not understand this new method of accessing their files securely online, and who for one reason or another insist on using FTP for their online file access. As they say - the customer is always right?

The Dirty Little Secret About SSL Certificates

The dirty little secret about SSL certificates is that:
Anyone can become a certificate authority.
The tools to become a certificate authority, and therefore to publish your own SSL certificates, is included in a wide variety of systems - chances are if you have an Ubuntu or CentOS install you already have the capability of becoming an SSL certificate authority via OpenSSL.

Firesheep Should Be A Call To Arms For System, Network & Web Admins

/
Firesheep by Eric Butler has just been released to the world. This Firefox plugin does a few things that have already been fairly easy to do for a while, but rolled up in one easy to use package:
  1. Sniffs data on unencrypted Wireless Networks
  2. Looks for unencrypted login cookies sent to known popular insecure sites
  3. Allows you to login to that account with 'One Click'
So what sites are impacted by default? Amazon.com, Basecamp, bit.ly, Cisco, CNET, Dropbox, Enom, Evernote, Facebook, Flickr, Github, Google, HackerNews, Harvest, Windows Live, NY Times, Pivotal Tracker, Slicehost, tumblr, Twitter, WordPress, Yahoo, and Yelp are among the few. A plugin system allows anyone to add their own sites (and cookie styles) to the plugin. Yikes! It goes without saying that this is a major security problem for anyone who uses unencrypted wireless networks. Includes on this list are many universities and companies such as Starbucks.

Google Adds Two-Factor Authentication To Google Apps (For Real, This Time)

I'm not trying to say I had anything to do with Google adding…

Linux Command Line, Generating a Random File

/
It is very easy to create a random file using the linux command…

A Poor Man's VPN: Proxy Web Connection to Remote Server (via SSH and Tunnel)

/
Did you ever have a situation where you needed to access a website…

Remote Desktop from Windows XP to Windows Server 2008 or Windows Vista

/
The Remote Desktop connection settings for Windows Server 2008,…