Showing posts with label Linux. Show all posts
Showing posts with label Linux. Show all posts

Wednesday, 13 September 2017

My next adventure

Prior to this post, I've been working on configuring an HSM for generating secure keys that are FIPS compliant, owing to the nature of my job and the calibre of clients the company has.
I'll update the information regarding the HSM, I've lost track of what I've done because I've been extremely busy fixing lots of bugs from security systems to program codes.

Today I'm working on moving files securely when a folder on one of our AWS servers has been updated. I'll need this file moved to another server in a different AWS location and a different machine. Technically, from Linux to Windows.
I got to know of a python package that could do this job, I'll need to write a script and run a cron job every week to ensure that no file is missed.

So my first and only hassle at present is with Paramiko package.
It's a bit weird on how to install in linux.
If you have similar issues visit: http://www.paramiko.org/installing.html

Afterwards, if you use centos, you should do this: yum install python-paramiko

And that's it, your script should run okay. Please comment on any ideas you may have encountered while trying out new things, I want to learn from you!

Saturday, 22 October 2016

Vulnerabilities found in 3 vendors (ISC, RedHat, and Linux)

The details of these vulnerabilities is not known but this would be researched and posted in the next few hours or days.
The information presented on CVE, CWE and Skybox is that on ISC and RedHat there's a DOS attack on their products - these versions 9.9.0 - 9.9.P2 have been affected when handling DNS packets. There is an issue with assertions, basically the exit failure is being exploited.. (more information about this later)

Linux Vulnerability
Reported as medium. Kernel versions 2.6.22 - 4.8.2 is prone to an Escalation of Privilege vulnerability (talk about obtaining root access.. eish!) Try it at home and let us all know what you did and if it worked. I'll try it on my VM.