Going through my Wordfence live traffic view is a nice way to see the daily fad of Chinese script kiddies. WordPress is one of the main targets of people trying to access your data. Obviously if you have a blog you must be sure you run an A+ certified security setup. See my other posts… Read More: #WordPress weather map plugin attack detected in #wordfence live traffic »
The newest commodity this days is crowd sourced data. All the digital corporations push this envelope harder and harder. Google wants to make me a “local guide”: post images of places on google maps and review businesses for free of course (they give you a badge, you know like boy scouts badges). This is lately… Read More: #CrowdSourcing and #DataMining the new resource mining, or how big… »
One of my internet service providers uses PPPOE for the internet connection. Sometimes if the physical connection is down for a long time the pppoe0 interface is no longer reconnecting or is stuck (looks like connected but no traffic passes through it). I found out that the problem is solved by force reconnecting it through… Read More: #Edgerouter: Force restart a PPPOE connection. »
Again and again the same myths and misunderstandings resurface from time to time. I noticed again a misplaced hype in an article shared on twitter about how biometric authentication will simplify banking. I have to share again something I learned many years ago when I was junior research student in a computer security group and… Read More: #Biometric #authentication is useless and dangerous alone »
Google puts another nail in the coffin for SHA-1. They already moved from using SHA-1 on their products but there are still a lot of places where is used by default. In a post on the Google Online Security Blog Announcing the first SHA1 collision Google researchers claim that they have a good way of… Read More: Blog Links: SHA-1 cryptographic hash collision detection by Google »
That warm feeling that you contributed to the community when you find your bug report in an official release notes 🙂 There is a new firmware release EdgeRouter ER-8/ERPro-8/EP-R8: Firmware v1.9.1 that reports as fixed an issue first reported by me for the 1.9 firmware. The issue was reported in the thread Update to 1.9… Read More: EdgeRouter: UBNT releases fix for firmware 1.9 that broke my… »
The following is an example on how to generate a certificate directly on a Linux server using keytool, then sign it by a windows CA. The example assumes we are regenerating a certificate for a glasfish domain. STEP 1: Delete the old certificate In glasfish in each domain where security is activated we have a… Read More: Security: Generate certificates with keytool »
I already have several posts related to security of an exposed Internet site. They were all summarized in the post Blog Links: Web site security As we know, the Internet threats are constant and evolving so to maintain the same level of security we constantly have to update the configurations of a secure installation. In… Read More: Security: Maintaining a secure WordPress blog »
I already had several posts related to constructing a secure website that can be released in the wild world-wide web. The following are several resources and links that will give a good idea on what one can do in order to secure a web site. First we need a way to analyse how secure our… Read More: Blog Links: Web site security »
An EdgeRouter firmware update from 1.8.5 to 1.9 broke my L2TP based VPN. After the update my l2tp connection to local subnets was no longer working. Note that I have a load balancing setup with eth0 and eth1 being the load balanced WAN interfaces. It seems that due to the changes done for the l2tp… Read More: EdgeRouter: Force add the default routes to the load balanced… »