The DCS-932LB1 webcam from D-Link is a very naughty webcam that pretends it has turned off upnp when it hasn’t. This is a security hole, opening up your webcam to the world and D-Link don’t seem to care. The best thing to do is disable upnp completely in your router, however you might need it. …
Continue reading ‘Disabling upnp for specific hosts in dd-wrt / openwrt routers’ »
Leaving passwords in your shell history is a security issue. I wrote a tool to help check: checkhistory. Feel free to send me pull requests / patches with additional regexes to match.
kernel-2.6.32-358.6.2.el6 has been released and it’s currently syncing to mirrors. I’ve verified that this kernel does indeed fix the issue. via www.centos.org – Forums – CentOS 6 – Security Support – Kernel 2.6.32-358 Local Privilege Escalation.
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation OISF. Suricata is developed by the OISF and its supporting vendors. via Suricata. This looks very interesting…
# Fix the cookie path and secure it Header edit Set-Cookie “^(.*)” $1;Secure via xMatters Community: How to increase security by marking cookies as ‘secure’.
Hardening PHP on linux to increase security is a complex process involving a plethora of settings. A while back I developed a script in order to check for any security settings that were out of place. via idontplaydarts.com | PHP & LAMP Stack Security.