fighting the lack of good ideas
A few years ago, I ran into a known issue with one of the products I use that manifests when the Red Hat Linux server it’s running on has a low entropy pool. And, as highlighted in that question, the steps I found 5 years ago didn’t work for me (turns out modifying the t…
This was asked recently on Server Fault. I’m asking if there’s a way to prevent files from being encrypted. I’m referring to some extent to ransomware, but specifically I want the following scenario: Windows File server w/ shares (on the E: drive) I want a way to tell the above server “don’t allow files on…
continue “can you disable encryption on a windows server?” »
Or maybe he’s right. But for the wrong reason. Over on Medium, which is where I saw his post, Dave said: “The problem of requiring HTTPs in less than 140 chars: 1.Few benefits for blog-like sites, and 2. The costs are prohibitive. There’s actually a #3 (sorry) — 3. For sites where the owner is…
I run several websites on my server – nothing heavy, just some various vhosts for Apache. Many (but not all) of them run WordPress. At some unknown point (and I haven’t kept the crap that was being used around), over 100,000 files were uploaded to the root directory of one of the websites (the only…
{This started as a Disqus reply to Eric’s post. Then I realized blog comments shouldn’t be longer than the original post 🙂 } The app-on-network concept is fascinating: and one I think I’ve thought about previously, too. Hypothetically, all “social networks” should have the same connections: yet there’s dozens upon dozens (I use at least…
For a long time I have been interested in real, actual, legitimate security. I am not a fan of the widespread use of security theater in our “post-9/11 world”, as Bruce Schneier calls it. Integrisure was supposed to be a real-world pentesting of “secure” facilities, a la Sneakers. In late 2000 / early 2001, I was working on…
In follow-up to a friend’s blog post on TrueCrypt, and in conjunction with some previous investigation and interests I have had, I am wondering how difficult it would be to run a tool like MooseFS in conjunction with TrueCrypt to provide a Wuala-like service as a plausibly-deniable data haven a la Cryptonomicon.