Tag Info

Hot answers tagged

46

Technically /etc/passwd isn't that scarry. In the past it has been used to store private data, passwords obviously, but as of nowadays you'd need to be more worried about /etc/shadow. Why every pentester/white-hat as well as black-hat target /etc/passwd is that this file is often used as proof of concept, as a test of possibility of gaining access to a ...


10

In order to log on to a machine you need to know both the user name and password. /etc/passwd provides information on users which gives you half of the information you need and used to include a hash of your password. A hash being something calculated from your password. It is difficult to find a password from a hash but not the other way round. If you ...


4

Physical access means you have all the power you need to do anything. There is no need for an operating system to prevent anything when someone is actually touching the machine. This has been convenient for the current problem I'm trying to fix, As intended. but I don't think this is desirable in any other circumstance. I do not see an ...


4

I suggest you to set iptables to limit number of connection per host. Ddos can use unlimited number of ip addresses sudo iptables -A INPUT -p tcp --dport 25 -m state --state NEW -m limit --limit 50/minute --limit-burst 200 -j ACCEPT sudo iptables -A INPUT -m state --state RELATED,ESTABLISHED -m limit --limit 50/second --limit-burst 50 -j ACCEPT sudo ...


3

In your System Settings there is a Brightness & Lock icon. This contains what you are looking for: This is on Gnome3, but should work similar on Unity.


3

I am writing now from the machine that works exactly that way. First, you will need to put whole /boot folder on the dongle. Encrypt the disk with key file and put the keyfile into the boot dongle too. Edit /etc/crypttab, add this line sda2_crypt UUID=14-88 /dev/disk/by-uuid/88-14:/rootfs.key luks,keyscript=/lib/cryptsetup/scripts/passdev where ...


2

This is really poor research on the part of whoever added this issue to the PCI compliance scanners. On my scans the problem is described as the following: Synopsis The SSH server running on the remote host is affected by multiple vulnerabilities. Description According to its banner, the version of OpenSSH running on the remote host is ...


2

Upgrade your system. A patched Firefox version (39.0.3+build2-0ubuntu) is available for all Ubuntu releases. sudo apt-get update sudo apt-get dist-upgrade firefox


2

You need to do 2 things yourself. configure Apache to your personal requirements. Apache comes with a webpage that shows "ItWorks!" so you need to set up at least 1 virtual host in ./sites-enabled/ configure MySQL to your personal requirements. MySQL has no user databases so you need to set this up. Both could be a problem regarding security: if you ...


1

No. Make sure to use dist-upgrade so that you get the latest kernel. And reboot after the kernel upgrade. Then set something up to continue to receive security updates and reboots after kernel updates, for example the unattended-upgrades package. For stability, you still need to add monitoring and backup solutions, as well as deployment reproducibility and ...


1

Basically, if someone has access to the user's terminal, there is no level of security. For example, a user could use htop to kill xscreensaver. Also, if a user gains access to the terminal, they should need a password. The fix is to use a strong password and sign out of tty whenever you are done.


1

Since I could not find a profile that worked for me, I profiled Spotify and created my own. This won't stop the Spotify binary from being able to access everything you might not want it to, but it's better than nothing. I give no guarantees, use this at your own risk. This works for me on both Ubuntu 14.04 and 15.04, and Spotify version 0.9.17.1. I'm using ...


1

I've posted my Spotify profile for AppArmor on GitHub: https://github.com/ruudkoot/spotify-apparmor.


1

You can also: Use firejail to create sandbox for firefox Create LXC (built in kernel VM) container to keep firefox in jail Add firefox to AppArmor (built-in kernel security module).


1

Norton 360 is supposed to perform security-related tasks that are closely tied to the underlying operating system. Even if you manage to run Norton 360 in Ubuntu with the help of Wine, it won't be able to perform its designated tasks, since Ubuntu/Linux is very different from Windows in this particular aspect. Hence, the question, whether Norton 360 runs on ...


1

Search system settings and click brightness and lock. Set the timer to dim the screen on x seconds of inactivity and the timer to lock after x seconds of dim screen.


1

you unchecked the option when you installed ubuntu . there was option Ask password for login or some thing other when you create user . now you have to run command sudo gpasswd -d username nopasswdlogin or do Settings->User Accounts->Unlock->Automatic Login-> Off


1

For an allocation block of IPs, you can just whois the IP you have. This will only get you as far as the ISP level usually unless you're talking about a company big enough to have its own allocations. For example, here's what I see if I enter the IP address of one of my servers: $ whois 109.74.xxx.yyy % This is the RIPE Database query service. % The objects ...


1

SSH authentication failures are logged by default to /var/log/auth.log. You should still see auth failures being logged there after the changes you describe -- something else must have changed. I have root login disabled entirely, and key-based auth only with passwords disabled for user accounts. I still see a few failures per hour in auth.log before they ...


1

I had the same (cache PUA.Win.Exploit.CVE_2012_0110) on my Linux. So I booted up from the USB or DISK instillation > To the try Linux mint out, > looked for the file in ( /usr/share/mime/mime.cache) and copped it to a USB stick. Logged back on to my installed Linux mint, and replaced the one on my sys, with the one I copped to my USB stick ...


1

flashplugin-installer package is in trusty-security section of repositories and it should be automatically installed. But adobe-flashplugin package is not. It is in partner repository. If you install flashplugin-installer, that should fix this issue. You can also set up the system to automatically upgrade packages from other sections of Ubuntu ...


1

CRON Excerpt of /etc/cron.daily/apt: # This file understands the following apt configuration variables: # Values here are the default. ... # APT::Periodic::Unattended-Upgrade "0"; # - Run the "unattended-upgrade" security upgrade script # every n-days (0=disabled) # Requires the package "unattended-upgrades" and will write # a log in ...


1

According to your output SSH is not running. SSH agent is software to hold private keys and is a helper. ps -ef | grep ssh shows there's no SSH active and grep --color=auto ssh is a result from your grep command and does not mean that SSH is active.


1

If a program is shared in /usr/share, then all users have rights to execute them. A simple way of restricting other users from executing these files, without uninstalling and reinstalling, is by changing the access permissions. Run this line of code, replace program with the name of the program you wish to restrict permissions. (Replace /usr/share with the ...



Only top voted, non community-wiki answers of a minimum length are eligible