imthenachoman

9 ms·

1.
by imthenachoman 8y ago
From what I can tell, their images are only for the big three cloud providers.
2.
by imthenachoman 8y ago
I am in the process of going through one of their benchmarks right now. They have some good stuff but I'm on page 130 of 431 and so far I haven't come across anything that needed to be changed from a standard Debian install.
3.
by imthenachoman 8y ago
Holy crap! I did not see those two on Reddit. I had posted to Reddit and was monitoring those comments but didn't know of these. Thanks! Although, I'm sad both of those threads got more comments then the original one I posted. Not
4.
by imthenachoman 8y ago
The goal is to cover as many things as possible, not everything. Security is a very deep and complex topic -- no single document can cover everything. I want to wet the readers appetite to get them interested enough to learn more. Thanks fo
5.
by imthenachoman 8y ago
Got it. Thank you!
6.
by imthenachoman 8y ago
Got it. Thanks!
7.
by imthenachoman 8y ago
This is great feedback! Thank you so much. I simplified things that would be too heavy to get into. The guide is not intended to teach everything about security -- that would be too much. The goal is to cover enough to give the reader a hig
8.
by imthenachoman 8y ago
Good idea. I need to figure out how to work that in into the guide. I added to the to-do list. Thanks!
9.
by imthenachoman 8y ago
I don't disagree but you gotta start with the basics. SELinux can be rather advanced/complex and probably warrants its own guide. I still have to learn it better before I try to write a guide on it.
10.
by imthenachoman 8y ago
It is on my to-do list. :)
11.
by imthenachoman 8y ago
Authy's mobile app should work with Google's TOTP PAM module.
12.
by imthenachoman 8y ago
When I was researching, literally every article I read mentioned Google'S TOTP PAM module. I can't even find any other ones that have active development. Do you know of any? Would love to use another one if it works with my iOS au
13.
by imthenachoman 8y ago
You're welcome. Glad it helped someone!
14.
by imthenachoman 8y ago
How would you define a production server? Do you mean in the context of a home server or a server used by a large company? The guide is intended for a server for home use. I hope anyone securing a large corporate server is not using informa
15.
by imthenachoman 8y ago
A pass phrase on a certificate is two step. Password + TOTP is two factor.
16.
by imthenachoman 8y ago
Interesting. I have never read that anywhere. I will research. TY!
17.
by imthenachoman 8y ago
LAN IPs or WAN IPs? If you're using public/private keys you can use the "from" option for the keys. But it's not fool proof.
18.
by imthenachoman 8y ago
Thanks for the idea on port knocking. I always forget about it. Will look into it more...
19.
by imthenachoman 8y ago
Agreed. The guide is intended for a home server. Anything more and you'd need a more robust network with dedicated firewalls and a DMZ, etc....
20.
by imthenachoman 8y ago
Can you use Tripwire for free for home/consumer stuff? And what does RPM verification do? Just make sure all the packages you have installed are legit?
21.
by imthenachoman 8y ago
I have a need to be able to SSH to my server from unknown sources, like my friends house or something. And VPN just moves changes the open port so no real benefit there. I agree on the firewall...
22.
by imthenachoman 8y ago
I am not familiar with namespaces in this context? Can you please point me in the right direction? I have added AppArmor to my to-do list. I know what chroot and setuid are, not sure what to mention about them in the guide? And I will look
23.
by imthenachoman 8y ago
Would you mind pasting the output of `deborphan` showing those two or creating a new issue on my GitHub page? I want to show it to the author of `deborphan` to see if he knows why its happening. https://github.com/imthenacho
24.
by imthenachoman 8y ago
I have never had issues with it but now you have me worried. I added a warning to the guide and will do some research.
25.
by imthenachoman 8y ago
Always. Google gives me 5 thousand pages of ads before the results I want. I hate to admit that sometimes I still use Google for searching. Like I love their shopping search.
26.
by imthenachoman 8y ago
So I use a separate gmail account for my server but forgot to mention in guide. I will add it. Although I wonder if its necessary if you use an app password. What is the worst a bad-actor can do with the app password?
27.
by imthenachoman 8y ago
There is a balance to be had here. In a high volume, sensitive environment you'd run your own mail server. But that is a challenge in-and-of itself. I don't recommend it for a home setup because there are numerous things to worry
28.
by imthenachoman 8y ago
Hey folks! I am the author of this guide. I did not know this was here or I would have commented sooner. This is my first time putting a guide like this together. I see a lot of really great feedback and I will be incorporating them into fu