rmdoss

17 ms·

121.
Arista is just a few months from an exclusion of their products entering the USA(blogs.cisco.com)
6 points by rmdoss 11y ago|4 comments
122.
by rmdoss 11y ago
And send it to Slack now as well: https://blog.sucuri.net/2016/01/server-security-integrating-...
123.
by rmdoss 11y ago
I recommend using something like OSSEC to watch your logs and also tie it to Slack/Pagerduty. This post explains how to set it up: https://blog.sucuri.net/2016/01/server-security-integrating-...
124.
by rmdoss 11y ago
Up to the point I am thinking on moving away from them: http://status.linode.com/
125.
by rmdoss 11y ago
Their 3rd or 4th outage just in the last few days. "Website, Manager, and API Connectivity Issues Investigating - We are currently investigating a connectivity issue affecting Linode.com and the Linode Manager. Dec 29, 13:39 UTC"
126.
by rmdoss 11y ago
If you follow good security practices and restricted your SSH access, you were safe against it: https://twitter.com/danielcid/status/678907293770059776 If you are managing any login system, try to implement ip whi
127.
by rmdoss 11y ago
TLDR: ScreenOS was backdoored.
128.
by rmdoss 11y ago
Can confirm whatsapp is down for some friends in Brazil. However, the real reason is not for what Techcrunch is saying. The issue is that WhatsApp didn't want to cooperate with the federal police and release chat information from some
129.
by rmdoss 11y ago
Not at all. Attacks against SHA1 on the HTTPS-context are really hard and mostly not practical to pull it off.
130.
by rmdoss 11y ago
I will just add it here: It happens all the time. Unfortunately, most hosting companies don't go public and warn their users. They try to hide and hope nobody else finds out. Glad to see them going public, warning their users and doing
131.
by rmdoss 11y ago
The beauty of DNS: No one was affected or noticed the problem. Resolvers just tried another one if they didnt get a response from one of the root servers.
132.
by rmdoss 11y ago
Starts at $5k per month last time I checked.
133.
by rmdoss 11y ago
DDoS is becoming an increasing pain lately. If you only care about HTTP/HTTPS traffic, you can get very solid DDoS protection at cheap prices. We use and love the Sucuri ( https://sucuri.net ) which starts at $9.99 per mont
134.
by rmdoss 11y ago
I think the main reason most /useful/ projects fails have to do with the initial user experience: 1- Is it easy to get started and installed? And that if the project pass the basic test that applies to any project, company or sof
135.
by rmdoss 11y ago
Can't agree more with the OSSEC recommendation ( http://ossec.net ) . Been using it extensively and gives an early warning system if something is going on (both in terms of files changes, backdoors and log trails).
136.
Increased Popularity in Website DDoS Extortion Campaigns(blog.sucuri.net)
2 points by rmdoss 11y ago|0 comments
137.
by rmdoss 11y ago
He mentioned CDN's not supporting HTTP/2. I am pretty sure a few them do. Including https://keycdn.com , https://sucuri.net , Akamai and likely a few more.
138.
by rmdoss 11y ago
And WordPress itself is NOT insecure. It is in fact the most secure CMS you can find out there. The issue is that its simplicity and easy installation, brought a lot of non-technical people to use it and develop for it. So you get a lot of
139.
by rmdoss 11y ago
If you are thinking on using vBulletin, that disclosure timeline should be a big red flag to look at alternatives. Note that exploits are happening in the wild already: https://blog.sucuri.net/2015/11/vbulletin-ex
140.
Check Point Discovers Critical VBulletin 0-Day(blog.checkpoint.com)
2 points by rmdoss 11y ago|1 comments
141.
by rmdoss 11y ago
That's the cool tool they used to test the performance of the site: https://performance.sucuri.net/
142.
by rmdoss 11y ago
Different... But WordPress core seems to have a better security track record as of lately.
143.
Brian Krebs – I'm an investigative reporter. AMA(reddit.com)
3 points by rmdoss 11y ago|0 comments
144.
by rmdoss 11y ago
Does anyone know how much computing power these cameras have? I would assume if someone has a botnet with thousands of cameras they would use for something better (and more lucrative) than just ddos... * * A bit off topic, but incapsula is
145.
by rmdoss 11y ago
I am still to find a sys admin that likes systemd. On the other hand, developers seem to enjoy it quite a bit. That's what happens when you have developers developing for themselves, not for sys admins (the end users of their work).
146.
by rmdoss 11y ago
A good and well researched ruleset is 99% of the WAF solution. Being able to create rules is interesting, but doesn't make it a WAF that can compete with ModSecurity, Sucuri, Barracuda and others. These products have serious research a
147.
by rmdoss 11y ago
This is not a WAF like what CloudFlare or Sucuri offers. It is basically the ability to create filtering rules at a high $ per rule. Real WAF/IDS products come with a large set of rules that are well tested and have a research team beh
148.
by rmdoss 11y ago
It doesn't. It comes with no rules and they charge quite a bit per rule entry. CloudFlare, Sucuri and Incapsula all come with pre-package, well-tested rules.
149.
by rmdoss 11y ago
Oh, it does. Their have their Kona WAF... Just a lot more expensive. Incapsula or Sucuri are the ones that compete with a lower pricing.
150.
by rmdoss 11y ago
Yes, direct competitors on the Enterprise space. On the low/mid end, only https://Imperva.com and http://Sucuri.net compete with CloudFlare.

More ›