'security' Tag

  • Using gpg-agent to write authenticating scripts

    April 30, 2011

    Sometimes you want to write a shell or other script, and that script is going to have to run under sudo. Under such conditions if the script does anything that requires authentication it will not act as expected. In plain terms it means that the regular popup for authentication will not appear. The tool maybe [...]

  • Configuring ssh server for pubkey + password authentication

    September 6, 2010

    In a struggle to secure my home computer I did battle with the ssh server once again to configure it “just the way I want it” ™. I prefer pubkey + password since this ensures that if I lose the laptop/phone/whatever then the lucky finder will not find his/her way into my home computer. So, [...]

  • WordPress and UNIX security (part 2)

    July 9, 2010

    In an effort to secure my blog I once again did battle with the mighty Word press. It seems that you can run a perfectly healthy blog with no write permissions by the HTTP server (usually www-data) to your service directory. What do I suggest? Change owner ship to root on your blog area. When [...]

  • Git and signing

    July 3, 2010

    I’m now using git heavily for configuration management and wanted to sign my objects. There were no complete guides out there that I found so here is the list of instructions that I finally arrived at: If you have a key that you are already using to sign things (email, code, whatever) then you can [...]

  • WordPress and UNIX security

    June 26, 2010

    Here is what I found the hard way. Sometime you want WordPress to install plugins, themes and all and do not want to pass through an ssh or ftp connection in order to achieve this. Maybe you have your own machine and do not want to run or configure an ssh or ftp server (which [...]

 
Powered by Wordpress and MySQL. Theme by Mark Veltzer derived from Shlomi Noachs openark theme