Lucas719.info

    Providing simple solutions to complex problems

    Browsing Posts in Security

    Find yourself logging into MANY servers at a time via SSH?

    It can become confusing at times to be sure which server you are logged into, especially when you have networks that are very similar.

    My solution (perhaps you have a better one, if so share it in the comments) is to use a combination of a welcome message and logon scripts to give me computer information when I logon to ensure that I am on the right machine and also give me a readout of important processes that are running.

    Ok so this assumes that you already have your linux server and you can ssh into it.

    I’m on a windows box at work so I have already installed an X window (we can touch on that on a later date) and Putty.

    Download PUTTY here: http://www.chiark.greenend.org.uk/~sgtatham/putty/

     

    When you connect, I login as ROOT:

    continue reading…

    Untangle Networks [home]This is the final post on setting up and configuring Untangle on your network.

    For a recap on our previous posts, see here:  -PART1- and -PART2-

    Now that I have had Untangle running on my network for a while, you are able to see some things that might make more sense.

    I have migrated it from “bridged” mode to “router” so it is now serving up DHCP and DNS, it still has a router between it and the network however i just turned DHCP off on that router so it get’s it from Untangle.

    I also have it secured to only allow internal admin and I have OpenVPN setup so I VPN into the box in order to manage it, just a bit safer from brute force attacks. continue reading…

    Google just launched two-step verification for all Google accounts, a system which makes your Google/Gmail account—the account possibly containing the lion’s share of your private communication online—considerably more secure. In fact, we’d encourage everyone who uses Gmail (the @gmail version or your Google Apps version) as their primary email provider to start using this feature as soon as possible. Here’s why, and then how.

    What’s Two-Step Verification?

    The only thing standing between a hacker and your Google account—and more importantly, your sensitive information—is your password. Even if you had the strongest password you could possibly randomly generate, if someone were able to discover that password, they’d be in.

    Two-step verification offers a more secure way for Google to verify that you are who you say you are when you’re logging into your Google account on a new web browser, through a new application, or on a new mobile device. With two-step verification, your password isn’t enough by itself. As Google put it:

    2-step verification requires two independent factors for authentication, much like you might see on your banking website: your password, plus a code you only use once. continue reading…

    The Computer Attacks You've Never Heard Of

    We’ve all heard of worms, Trojan horses, phishing, and other common computer security attacks that aims to infect your system and steal your data. But what about bluebugging, smishing, and scareware? Brush up on your computer security terminology with these lesser-known attackers.

    Malware is serious business. It can slow PCs down to a crawl. On the other hand, some of the terms security researchers have decided to name these sometimes annoying (and often damaging) pieces of code are downright charming.

    Here are nine that stand out, followed by seven most people have heard of:

    The Security Attacks Most People Have Never Heard Of

    Smishing: Smishing or “SMS phishing” refers to a phishing attack that specifically targets mobile phones. The victim would receive an SMS with a hyperlink wherein a malware automatically finds its way in your phone or leads the user to a phishing site formatted for mobile screens. The term was brought on by David Rayhawk in a McAfee Avert Labs blog. continue reading…

    © 2012 LucasPC.com
    Hosted By: RobShambaugh.com