A friend mentioned this to me & of course I had to back the device, since it looks like a Flipper alternative, but has Wi-Fi built into their board. I’ll admit, I do still need to read all of their details, but if the community here is anything like Flipper’s, & for only $119 on […]
Tag: Security
Using ModSecurity Rules with nginx
I wanted to make note of this page, because it was a huge help getting the ModSecurity OWASP rule set working with nginx. LinuxBabe: How to Set Up ModSecurity with Nginx on Debian/Ubuntu Then to start exempting specific pages from specific rule ID’s, you’ll using these three commands quite a bit: `tailf /var/log/modsec_audit.log``sudo nano /etc/nginx/modsec/coreruleset-3.3.4/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf``sudo […]
FINALLY: A Good Password Management Article
DreamHost recently posted an article on their site about password management: DreamHost: How to Create Strong Passwords to Keep Your Website Safe. Just the list of points is much better than what I’m used to seeing: Make your password long. Don’t use a common phrase. Test your password. Don’t reuse your password. Use a password manager. […]
Don’t Change that Pa$$w0rd
So I feel like this is a discussion that needs to be had, mainly because of this article: Engadget: The man who put us through password hell regrets everything. There is just so much wrong with this article, I’ll try to take it idea by idea. It is incredibly frustrating to constantly think of new […]